387b73284a941ea99f74d32fe7c4b935 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

387b73284a941ea99f74d32fe7c4b935
Size

803KB
MD5

387b73284a941ea99f74d32fe7c4b935
SHA1

988b77ac1fe39feeb32e355d5424d7f86ef07b2e
SHA256

e9331ed9127a653b72199e45c11134791b3911753295342541787e70e8d4942f
SHA512

19d474b63959058c8a211e904802bde88a3423cb3d66cdd2f1d39f56f8d6a848d99dd2bdd5be56b5e05bdad24b565cdf8efbb3c49018b959c9412dfd4b6b17f4
SSDEEP

12288:AlmhLR6mFtCTclt1BD5tehMiZOGvqfT46qcIcS9LMc+yNzzDluzIwHzkOn4KV72I:Ak1FnlhDLsZOGvqfTCX5PFfluzmfC7N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
387b73284a941ea99f74d32fe7c4b935

Files

387b73284a941ea99f74d32fe7c4b935
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ