387d29eac0874dacd326dfdb797fd34b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

387d29eac0874dacd326dfdb797fd34b
Size

247KB
MD5

387d29eac0874dacd326dfdb797fd34b
SHA1

b47a8b6b6e6e19e666157f747f285acd3bba648a
SHA256

8a5648090e1db55f35fc22d593eeb72fe352493c3dbf46a0118c9c66db4c0198
SHA512

f56514a767f1476398f957fad21aebc06f4174984284734f2d673cd467c0558da6e175f488e915397bb208b52869856df14086c16aad0b633889658fae5d0d20
SSDEEP

6144:oYm8o1G7z8Y85l/AnyxWlLitEYTwacxQiY:Pm8Rn8RpAnyxWls/saV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
387d29eac0874dacd326dfdb797fd34b

Files

387d29eac0874dacd326dfdb797fd34b
.exe windows:4 windows x86 arch:x86

506dbe80e30d2780f269bc11f03339c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetWindowsDirectoryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
fwrite
malloc
memset
rewind
signal
sprintf
strlen

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE