070bc96d6d7fca84c4b4162d623d17c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

070bc96d6d7fca84c4b4162d623d17c4
Size

225KB
MD5

070bc96d6d7fca84c4b4162d623d17c4
SHA1

2f1095a796a38b22e3021a7e89edcd04df36ae85
SHA256

4c30f91aaa8443b316c8ac2d0423bf5e4e9704c8ea9c3ade2d7f70e386a8e2c6
SHA512

2d069d620597b810fe9135c13fdd2bfde0b692886e097e545db903ef8552a71b0b00092cde00dd671df09b5f5040f0c482f759fcc901c87502b9a44043c4b7df
SSDEEP

6144:uq2EyX74GvTEW3lfS0cS8xukgLb2sRpSOu2rpQ:x217TvTnB1cS8TgLbxphu2rpQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
070bc96d6d7fca84c4b4162d623d17c4

Files

070bc96d6d7fca84c4b4162d623d17c4
.exe windows:6 windows x86 arch:x86

76cb49957629b5fe0d40d13588a8762e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
WriteFile
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleW
GetProcAddress
LoadLibraryA
LocalFree
lstrlenW
WideCharToMultiByte
EnumTimeFormatsW
GetConsoleOutputCP
WriteConsoleW

user32

LoadStringW
MessageBoxW

ole32

OleInitialize
OleUninitialize

msvcrt

towlower
malloc
memset

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ