1401db037170ba8a8ab97d5c10818a15 | Triage

Sharing

General

Target

1401db037170ba8a8ab97d5c10818a15
Size

265KB
MD5

1401db037170ba8a8ab97d5c10818a15
SHA1

241836cee767d926be79c97362e44815a64365ca
SHA256

974d377f6b7acf080bda731232ddfd90b5a7aa965962ca5aac96d9cfe1bba4c6
SHA512

4f06e0464b774bda8065edd645ecf2298cddfaeb53f00f9fa9a5feefeac857aae0bf3c2f7ca1fdab7702607d4d2a289432ee0e5159af51b41949577b0a28cace
SSDEEP

6144:cH4gWe1tJpsIyZ3rSy6DER503WUSdM3v56AO92iv:m4te1trvyB/6oR5xUSdMfocw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1401db037170ba8a8ab97d5c10818a15

Files

1401db037170ba8a8ab97d5c10818a15
.exe windows:4 windows x86 arch:x86

2f469e28d762c4b75f504f50b355e952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

ExitProcess
lstrcpyA
lstrcatA
WriteFile
SizeofResource
RtlZeroMemory
LockResource
LoadResource
GetTickCount
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
CreateFileA
FindResourceA
GetCurrentDirectoryA

Sections

.text
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE