194e7b8cc5c4a79afcec6dbc7386df7c | Triage

Sharing

General

Target

194e7b8cc5c4a79afcec6dbc7386df7c
Size

58KB
MD5

194e7b8cc5c4a79afcec6dbc7386df7c
SHA1

8cc4647565b2706a4aa48a21cfca1389302afffb
SHA256

2757657d1bfa20dfeda4e34807d215fbfcc9b40d7715f0748cc5313c02b2e048
SHA512

5b5ea4b8561cab21eab3cc98a85c35426a1cd2fdaf607bfad2fef3ef1d455d19cb2a9b0e823dc83e799fccead128ffaefb723a80954e927f86e208b2c773b22d
SSDEEP

1536:/SuAHAhOI6Cv0gg2szO/71mbXKLSEky9t/9:0HAhOI6pgghi/x8XeV9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
194e7b8cc5c4a79afcec6dbc7386df7c

Files

194e7b8cc5c4a79afcec6dbc7386df7c
.exe windows:4 windows x86 arch:x86

8838a4a1d31fba487467c7a667177b49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

msvcrt

strcpy
calloc
strlen
fclose
fwrite
fopen
malloc
strcat
memcpy
strcmp
memset
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ