71bfa42e24c037dccf94490ec8d3199c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71bfa42e24c037dccf94490ec8d3199c
Size

80KB
MD5

71bfa42e24c037dccf94490ec8d3199c
SHA1

d0fc0b0dddc5e480bb5f5101894b42cf50a61fb4
SHA256

8e1642b76d297bac060211b2a53339f60dccae2c373640160fd4e863b567eec9
SHA512

4bf286a0cd5da0415dbc0c0995cc7be174384ee3dc4ef83f757bfc415d0e560d86823ecda9ce6e74069d88b22d55b4863051044c2a9be8da76d8e34b08863df5
SSDEEP

1536:sYNyhslKdvfppJjdhlVAdo9zFiOgljd12OdVuCYU82hW8fPL:siyhHdvRp1dho6FEjdEOXZ8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71bfa42e24c037dccf94490ec8d3199c

Files

71bfa42e24c037dccf94490ec8d3199c
.exe windows:4 windows x86 arch:x86

2e7c5768fc0ca20ccca1eaeec2209685

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
AssignProcessToJobObject
GetConsoleSelectionInfo
ExpungeConsoleCommandHistoryA
_lopen
OpenProfileUserMapping
InterlockedPushEntrySList
CopyFileExW
EnumResourceTypesA
UnlockFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE