739fe0684fdeb182bde9ae8d077b0f65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

739fe0684fdeb182bde9ae8d077b0f65
Size

151KB
MD5

739fe0684fdeb182bde9ae8d077b0f65
SHA1

5188264dbb23e9ed8fc82d4770f4a238448047c6
SHA256

8e17ee3454e513ebd20b34ab84a9c62d5228e3b55d0860fa58d58e416f86d79d
SHA512

190d4618e283f62ebf78bd6886c3c65343b52d2bcd12244ddd6fbedb5f700bd67bec32427f413bbc15dac0ae06cb858cc543463be8c0901974d8807c01f2e9c4
SSDEEP

1536:UI0+sr7fLeyYDfemNLa6ufmtekoi7VLcsE2Z4WvwoZiQxoKe+J/k0FnK6dpFH662:MJdok6dVnE2KawoZizp+hrxx3IAmN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
739fe0684fdeb182bde9ae8d077b0f65

Files

739fe0684fdeb182bde9ae8d077b0f65
.exe windows:4 windows x86 arch:x86

6039c26165040db47e28057ca34786ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen

user32

MessageBoxA
wvsprintfA

kernel32

GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ