38841a312983e3ce0f771d4c443480de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38841a312983e3ce0f771d4c443480de
Size

11KB
MD5

38841a312983e3ce0f771d4c443480de
SHA1

8ec787687c54062a77ba9bee256fcd54489db624
SHA256

2663236c68cc01ae2152252c9442dfd240ed2406206fa640b7ca30ef0609288b
SHA512

8b6d4a380cf9fac35db3e1f56dad9f6d0dfdf52a65fa71f62fa8e869e1e9e7fe12696bc12ca94e828fca78e36b22b8fbd5899bb81f3fec73765b7630da22d785
SSDEEP

96:JKIPj7O01iruycgiu3/mnEATELCkOGqBmDjF1DCgJDe8tds/ew+lSzAeokk:k6vO01ir3cgN39AAekFGuds/e3S0l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38841a312983e3ce0f771d4c443480de

Files

38841a312983e3ce0f771d4c443480de
.exe windows:4 windows x86 arch:x86

f99b5f1e1f7185d3d4569b1cc3fc649b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
DeleteFileA
ExitProcess
FindResourceA
GetCurrentDirectoryA
GetModuleFileNameA
GetProcessHeap
GetSystemDirectoryA
GetTempPathA
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ