71df8c60850527c996493f8be5775485 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71df8c60850527c996493f8be5775485
Size

23KB
MD5

71df8c60850527c996493f8be5775485
SHA1

700263e7dac76cc1491791b62ab82abf16648ce9
SHA256

8e2abfa527992aac74350ec4717fd1eb2580670ca244e4a243a7c04539fe88fc
SHA512

6a0ab554456d02e6b9d57d45d199659ee692dfd779b2d9ff78e9460b1cd1754d3830ad7f37abab1a59b7ff3a1f908a3357582d71c6ca969c3d62ce01171a7ab2
SSDEEP

384:GFF5SmrYlDmtKUKmtQrchy/9w8YkYOZvDR6T7iHs:w5Sl4tpQ9vYwRrM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71df8c60850527c996493f8be5775485

Files

71df8c60850527c996493f8be5775485
.exe windows:4 windows x86 arch:x86

cbff739b9ad20e547df480a38c427485

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateMutexA
ExitProcess
FindAtomA
GetAtomNameA
InterlockedIncrement
ReleaseMutex
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fileno
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
signal
strlen
strtoul
system

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE