197fd6c852a71b61fd5d98b1cb78eafc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

197fd6c852a71b61fd5d98b1cb78eafc
Size

9KB
MD5

197fd6c852a71b61fd5d98b1cb78eafc
SHA1

c5bc07da52754c3887d7b57a249b8a277c3bfaf9
SHA256

1f12fbb3a02a73ce4ae80340e5ad818527b1b87c3d438a2a9b900d6f35eef592
SHA512

b056c975144dcbd5dca5eed065a3213d5abef47626f5f4febce3882f920a8140370c00b0f3662229d5f21cf902e4124bd277faa7b80db0a08543ba0d7509e1b2
SSDEEP

192:qf70vHOpgwvbQjhHjjO34D/80hVwrWxFAmBD7M:qfVg6bQjhHjjO3y8E0nmB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
197fd6c852a71b61fd5d98b1cb78eafc

Files

197fd6c852a71b61fd5d98b1cb78eafc
.exe windows:4 windows x86 arch:x86

6fe964f82fd57f5fe5af99187f72146e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE