1174b99524ee7ae3626e956605e35e79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1174b99524ee7ae3626e956605e35e79
Size

46KB
MD5

1174b99524ee7ae3626e956605e35e79
SHA1

c3aea7ddf3920182577a2754296a3958f7588fa0
SHA256

6d8a43bd9bf72c484dabc315ba5d86124e8a174025b30d2731a3c4c05714901a
SHA512

46483e7a56cd7a8d1b4a1fbffea6b7db8dcd4575b78184091ff087b4555960707f4649012e1bffe61243797bd81eb0cf8707f8e31c82ff21387e85ec8170be6b
SSDEEP

768:N75gMnuVTGxX2GXEEhewkhxo2lQGpGCGT6eFM748Epba9YdrkKr7MIhnUW4OUM:N7GMnuVSxxZswkvKLtFODsa9AbnHU/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1174b99524ee7ae3626e956605e35e79

Files

1174b99524ee7ae3626e956605e35e79
.exe windows:4 windows x86 arch:x86

3d2ff85a05d2cd384d0fd9505bb0ddbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
GetModuleHandleA
GetStartupInfoA

msvcrt

strcpy
strcmp
_except_handler3
_exit
_XcptFilter
exit
_acmdln
memset
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat
free
calloc
strlen
__getmainargs

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE