2370a357e7b26acf2a091510340d7a9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2370a357e7b26acf2a091510340d7a9c
Size

32KB
MD5

2370a357e7b26acf2a091510340d7a9c
SHA1

201e1f4d92e995586b5f9d711bb5f17de35be521
SHA256

20237dedcafedf4f05863ad2e3e48eecc853c5d6b249c6ff871ab24a189f56d7
SHA512

a4dd3c5f13f34ad6a0361c8fa875e71a3dfb702b9bd9c08877108e1fcea2d01017b7a509c8ff248759b9dc46a97eb29c65fc52624341dfd2d39b27d3c9fb3bbc
SSDEEP

192:T44buKupK3kxVp2SzH6HQP1oynE+1pJKEDFhgm/VlHmTAZbebAtMGV18gg:sbpRwG1i+1bfvgm/VlHmzTGf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2370a357e7b26acf2a091510340d7a9c

Files

2370a357e7b26acf2a091510340d7a9c
.exe windows:4 windows x86 arch:x86

d4552a4766707a4aace98a194b5848e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

__p__commode
__p__fmode
_adjust_fdiv
_except_handler3
_access
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strchr
fopen
fprintf
fclose
strrchr
sprintf
__set_app_type

kernel32

GetModuleHandleA
GetStartupInfoA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
GetVersionExA
WinExec
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE