70baf7fdfe70404911cd75ccec870b06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70baf7fdfe70404911cd75ccec870b06
Size

188KB
MD5

70baf7fdfe70404911cd75ccec870b06
SHA1

55954fc2d2b53ce00f6320a45f018500ff556d3e
SHA256

c6497699300a50802a9677f651f0ebf429ec2c8a3072e8ff021393d953c749a6
SHA512

b4e8bb1df478a1c6a5ae87e6271bc1105765a9d4979f46749490641f4059de8f80fc201434fab58c4e03942eb020f9600dd920993a76e2b5f515920e8183d904
SSDEEP

3072:Sk4FCxJHa9Nd5rUjYyU4iZZcAxRhG8jcQQ1Kqu+FebmG2p4VvJ:S7FCx25wjYte1QQ1Q+0bt8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70baf7fdfe70404911cd75ccec870b06

Files

70baf7fdfe70404911cd75ccec870b06
.exe windows:4 windows x86 arch:x86

b6b071c57a7dc3ff81561a979c850bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineA
GetLastError
GetModuleHandleA
ExitProcess
LoadLibraryA
GetCommandLineW
ExitThread
GetProcAddress
GetOEMCP
IsBadHugeReadPtr
lstrlenW
GetACP
IsBadReadPtr
GetModuleHandleW

Sections

CODE
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ