70e3204baa6dc87d24b3041648d6b4d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70e3204baa6dc87d24b3041648d6b4d0
Size

49KB
MD5

70e3204baa6dc87d24b3041648d6b4d0
SHA1

050afe7342cd61dc16b82d5317363a07fc9125fc
SHA256

e444c9d8974e07aa9305ba0c0a5dca5b2b954862cf9294415ddc605c9dc4fa03
SHA512

0b107c393a5b48fde103004a51999c2293e3fa76b7a473ffe344b36be7a2ab6688aad4d33c8b69b0ddadbf516db1aefa07f0b7eb141ca3fca4cbbb8edf383d93
SSDEEP

768:Gj5luXUMK7FQ7QlAMRijhtxCEpMsgqL04U5QK:GDuXUMK7+QSMR+ht0EGsgw0d5QK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70e3204baa6dc87d24b3041648d6b4d0

Files

70e3204baa6dc87d24b3041648d6b4d0
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Exports

Exports

DllGetLCID

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 160B - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE