117a397e198548f57adb3e2096010f4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117a397e198548f57adb3e2096010f4b
Size

22KB
MD5

117a397e198548f57adb3e2096010f4b
SHA1

087191e0ac46a9e5dc82bbd36a6dfe0f22986a72
SHA256

9cb432b80ea6c78a197f92b934206e530dcd54a12f9fce1f213554776f81b72e
SHA512

cb40f947f1e179853e4fc08adbe9f064d3d71edcd4b9ed5e36ca11ed397c644c6309e48b8568ac08b55286df16b8835cc6921c8cee23b54165bedb1868845120
SSDEEP

384:CMFDewl5NQV5fU99Szf2/QVs6ar5DWPwJBgdxPX8+wafeoN980RtOID:Cy/ANU99SD2J1lJBgdZ8+wafzpMK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
117a397e198548f57adb3e2096010f4b

Files

117a397e198548f57adb3e2096010f4b
.exe windows:4 windows x86 arch:x86

c2022d59063a3bee3e08b0792cf5ab79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

DisconnectNamedPipe

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ