157fc132a9e190a194b2ca32f8e3f0ce | Triage

Sharing

General

Target

157fc132a9e190a194b2ca32f8e3f0ce
Size

22KB
MD5

157fc132a9e190a194b2ca32f8e3f0ce
SHA1

7db68da657edaaa83be77548f358197c727ad10f
SHA256

ff972a034c187dac3be5e89eebc4cda98dfa166bc4a7846b059163f447d7315c
SHA512

29ad0b56f165d9cad13feea737fbf428b542ef97105ceca2a1cbfe9018beb04a0a65700fd821993208608d0b7d6757bdd47050b585581fcc86c49590980633ad
SSDEEP

384:rqLuwlmbQPBQD42YqOhb9Wt9BNBHxEUmPiKwBLdWoDRNOVMwjy1:UQ2BQ42g6BNBHxQPiK5oDvOGwjy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
157fc132a9e190a194b2ca32f8e3f0ce

Files

157fc132a9e190a194b2ca32f8e3f0ce
.exe windows:5 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE