070c4b847661309be6be7cd0f0a3ef98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

070c4b847661309be6be7cd0f0a3ef98
Size

2.6MB
MD5

070c4b847661309be6be7cd0f0a3ef98
SHA1

864e9fd6dd62da92d3128a7ea41a63d50be17249
SHA256

db978314cf5359df83fa8da78a2a1f632d53db8bdf9a9347b4ca61c76c4d29f8
SHA512

b69f434a45a45df35684191168ec748fb10c3fd814761ed9900187c3f5de9af68a504719353f483a44c1266fcefac845d492ca491090553711c75ac1ba18d17a
SSDEEP

49152:JwcA1zKSFkohFIrmhFdK5mBSO3CqwyyWzf7l:GcA1zKcQrmZKUBfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
070c4b847661309be6be7cd0f0a3ef98

Files

070c4b847661309be6be7cd0f0a3ef98
.exe windows:4 windows x86 arch:x86

88381b84da56810b869e897e6d45bd58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Sections

.text
Size: 808KB - Virtual size: 806KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.main
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ