280034a5bd021f6f515f0f755d98d29e | Triage

Sharing

General

Target

280034a5bd021f6f515f0f755d98d29e
Size

16KB
MD5

280034a5bd021f6f515f0f755d98d29e
SHA1

392eb2f107fad3a7b22762ee91addaf471ff8841
SHA256

4e52073820b123177553ed811fd6bec804e03120ebc5b772b575a429cc82c526
SHA512

f532fb7945069fb05ea7b5a4878b40aa46cbf2649533027114caa912b23449cbb7084ba5472e47e67605d2e4239b8e2d458eea8674d61e1ed922cb8745b3a58f
SSDEEP

192:V41DiLytDUY7+lFOCpqXCggfglIi8Z+QQLWhdLYLYCRZBtJP1oynqAySzzHDz9:a+ymPlFISggfgSiwe4sLY8L1QhSXHDR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
280034a5bd021f6f515f0f755d98d29e

Files

280034a5bd021f6f515f0f755d98d29e
.exe windows:4 windows x86 arch:x86

fdb5ab48cb8867dd3c7c7a89006d9c48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fseek
fopen
_read
_close
_write
_open
_lseek
free
sprintf
strncpy
rand
srand
time
_exit
fread
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fgetc
fputc
fclose
??2@YAPAXI@Z
_XcptFilter
malloc

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ