70f671f60f6c7c9c165342cfe2cbcea2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70f671f60f6c7c9c165342cfe2cbcea2
Size

82KB
MD5

70f671f60f6c7c9c165342cfe2cbcea2
SHA1

fe2528dfad57330a26e4dd03d0aa77f91e22498a
SHA256

81897f61f675319990f4cac30935e4427325f7344cc762d3767753c415e4602d
SHA512

1741333280dc33d4d90bbcdf2433e569bbb36973a42226522498c525f383ae925004aa09a019fd2d7982d9676de8ec50577baae86f6058cc1540f934389dbf48
SSDEEP

1536:lGVFffAw4cPrxc2mQXw8qeljxixwVhdtd2TBUGcimI/:lG/rPPr5dqEVixWG3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f671f60f6c7c9c165342cfe2cbcea2

Files

70f671f60f6c7c9c165342cfe2cbcea2
.exe windows:5 windows x86 arch:x86

99ceb450ad9b10f6d2d82ba6b36010b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
WriteConsoleOutputAttribute
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

user32

GetUpdateRect
SetUserObjectSecurity

Exports

Exports

Acbukhkofr
ReadKixjwrcl

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rcode
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 67KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrd
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ