146e7867c3cf3e780ed06f540036fa77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146e7867c3cf3e780ed06f540036fa77
Size

137KB
MD5

146e7867c3cf3e780ed06f540036fa77
SHA1

8b9706b5234632a47767799492777f4157c74f9a
SHA256

dbfb5f690cffb38e04744594e9a0a42be1e39d54a4f4cef19be5a0603534e3e7
SHA512

fcb760b9c7302a880bf01006844d8bdd9b70a1ffe180d59639032f09c47fc25fc2007d7d12f7eea17a20c00d889d29fca389178b47275645c348d59e23c9f7ba
SSDEEP

3072:wFsAWJBK+fNAGdV+Ue4bD6cSkqEtgpke1migvjZg/EKIgXgu0OgTNUqgTUH9:2sAUBl+BlktePgkfIGD0Oggs9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146e7867c3cf3e780ed06f540036fa77

Files

146e7867c3cf3e780ed06f540036fa77
.exe windows:4 windows x86 arch:x86

43396d4a974137f09942e68698b464ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

WinExec
FlushConsoleInputBuffer
VirtualUnlock
InterlockedCompareExchange
BeginUpdateResourceA
WritePrivateProfileStringA
FindNextFileA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ