ff3729823a8cf7758c1d95ae289815b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff3729823a8cf7758c1d95ae289815b5
Size

67KB
MD5

ff3729823a8cf7758c1d95ae289815b5
SHA1

2464aa0c94a00d70cd9bccf8f0966ec038374710
SHA256

d477cf67fc51c85b618d16ebe77f99050fca7e763c55c8c080678609212bb432
SHA512

a7536ef7c284fca40d308c650ffc728ab7ed09923f823a5c5443cd2c319b1504bfa0321839d1ecc9d3cfa3ca8ba99bc0f320a4bd9c6c219f01c375cb3d7fed72
SSDEEP

1536:7vKe3Wv0ja7RlGXRvY3vKWuWOwwOLdjfA/nyfHYTMSatQw7We:bbeRlAY3vKW5OwHLJfA/nygQSaNWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff3729823a8cf7758c1d95ae289815b5

Files

ff3729823a8cf7758c1d95ae289815b5
.exe windows:5 windows x86 arch:x86

fb0b7b94dcb8fd71350480b609b12d50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ReadFile
WriteConsoleOutputCharacterA
VirtualProtect

user32

UpdateWindow

Exports

Exports

OpenNdmrwstxf
AddDqfucvfuvr
Teuxvscsko

Sections

.data
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrd
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ