74bacd48cc5ed59f409fb29135d52f66 | Triage

Sharing

General

Target

74bacd48cc5ed59f409fb29135d52f66
Size

17KB
MD5

74bacd48cc5ed59f409fb29135d52f66
SHA1

44786a4f93ee622d0b72202ec45ae77254cf1271
SHA256

41b2447315cd6af2e42f122dbb07e697931d22a342ab46bfa0744931f22be246
SHA512

9767bcd9b0ed0292e7ecec4c2ee45454e05dfe20f6f944a863ce99578e03932f5513f5d4aab6c5d48b73a69dac3f5093f23c4ca3678b66b1bae4bfa5dd3ef9b2
SSDEEP

192:Tj/NWMMbDIr3P7nAx6wCMrpY7e8LqPZo5LdCfq1Rn6O3:3/NWurTAx6r6+e9Pfqbn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74bacd48cc5ed59f409fb29135d52f66

Files

74bacd48cc5ed59f409fb29135d52f66
.exe windows:1 windows x86 arch:x86

e96de3433ddae3988c386f67d17d2b55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

crtdll

_getch
__GetMainArgs
_strlwr
exit
gets
printf
raise
signal
strlen
system

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE