229845a6350a8d2c177f00f1643db792 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

229845a6350a8d2c177f00f1643db792
Size

225KB
MD5

229845a6350a8d2c177f00f1643db792
SHA1

b80704d4380e215282b27263333b9f6c697f7a1e
SHA256

c1be1e6da26e41cb612258e2a9607b65f40ec435df5e015cf7a4364657a43052
SHA512

d6b2ea14c7409072c24bae9a20c13ae3bb94d48190ef7a9873fef736beaa1e252ed803e34e3c963df6e62415f620c3b81640796c07acce652f50099efdbfcc85
SSDEEP

3072:UrF3WpIh4basAvFc7UDgq/DCvqnZOMyCICB1JsTZeIW:UpFhYA67NKuvqnr/I7TZeR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
229845a6350a8d2c177f00f1643db792

Files

229845a6350a8d2c177f00f1643db792
.exe windows:4 windows x86 arch:x86

69fda52239cd05ae531c7595231c6680

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
ReadProcessMemory
OpenSemaphoreA
SetEnvironmentVariableA
LockResource
TransmitCommChar
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ