370fb999b34e14575177a5318071db10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

370fb999b34e14575177a5318071db10
Size

384KB
MD5

370fb999b34e14575177a5318071db10
SHA1

d71167c4ca2e5f7457e3bbe9e5e360f406dd608d
SHA256

15f379c45ae111dc4eb6919efbac9ffc87c0064df828df5f17b1602874fcd8da
SHA512

a3033b79c619a3c263fe5a126d664ab51915649000ab9f36cac4c936a10bcce3b57c3888a732e904446db5c7daf7e03fcfa87107da72b148f3b72ddab563aa8b
SSDEEP

6144:GtDWAgjgRGOsYZ9S4AlXcVOTacgjKrwgv9wE/DLWIUfXzidt6q6bDb94RUh:Gt6AgK9ZQzXcVrcogVw2DLWFidtJ6vbv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
370fb999b34e14575177a5318071db10

Files

370fb999b34e14575177a5318071db10
.exe windows:4 windows x86 arch:x86

a981e01d31d90eea6dd4e41706908ed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetProcAddress
VirtualAlloc
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW

user32

GetActiveWindow
ShowWindow
SetActiveWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 519KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ