1774757b569c2b102fcdca943ec12f6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1774757b569c2b102fcdca943ec12f6f
Size

218KB
MD5

1774757b569c2b102fcdca943ec12f6f
SHA1

ea2b5c2d7e0a63db55720bd1662458c01f8fab33
SHA256

c0fd6f1e4dede43db17cb804f8a05b933ad03dc2096cc4890c12f40247c3ddc8
SHA512

0db958015a629739b9d1ece26a67d256caa7d5a64c2a6808ef108a8606c3aae22a81c1f6c2041900d5d84110db2dedea4b2c508cf8ef7f5adeffe4aff50714b8
SSDEEP

6144:Ls+O8hEm1UufQXmrFOIxV93S/X9qNwTrxYb:LZO8hE8UHmrPn93S6wna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1774757b569c2b102fcdca943ec12f6f

Files

1774757b569c2b102fcdca943ec12f6f
.exe windows:4 windows x86 arch:x86

3e988e8f8338df8fb36c7c2e4ab190aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
fopen
fseek
fread
??2@YAPAXI@Z
tmpnam
fgetc
fputc
fclose
time
srand
__p__fmode
rand

kernel32

GetModuleHandleA
GetModuleFileNameA
GetTempPathA
FindFirstFileA
GetSystemDirectoryA
GetCurrentDirectoryA
SystemTimeToFileTime
CreateFileA
SetFileTime
GetFileSize
CloseHandle
Sleep
GetStartupInfoA

user32

PeekMessageA
wsprintfA
DispatchMessageA
SendMessageA
TranslateMessage

shell32

ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ