70c661e8bb50441748915f5d405ee8f2 | Triage

Sharing

General

Target

70c661e8bb50441748915f5d405ee8f2
Size

19KB
MD5

70c661e8bb50441748915f5d405ee8f2
SHA1

c5ffc77470d693e280b4be204955f532b8d63309
SHA256

98dd2850dc5198a08aaf11c222ad12fa902bfa4aab7e0a36ebcc3d164f3404c9
SHA512

af00d1605fd6b857da8d48b9ef0f5dd7da3fc69b63786a88a5ea62956c7e932da67d6de50a30ed3c02edc3c74b1ebf5a7f825eb15c3638d3143b8b1db11b4623
SSDEEP

192:mRHmg8Xlaw7wrCYCGSES33YhcNTMBcTIMZf01q4xmu6djyFN0BKCDGr:VXlaw7wrCYCG4nYhXBNqf8yheH0Bxs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70c661e8bb50441748915f5d405ee8f2

Files

70c661e8bb50441748915f5d405ee8f2
.exe windows:4 windows x86 arch:x86

ccb82d31a350e350314fd0b045271f67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
fwrite
gets
malloc
printf
remove
rename
scanf
signal
strcmp
strlen

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE