390808dab0f9379ef0bde6b3a854810b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390808dab0f9379ef0bde6b3a854810b
Size

17KB
MD5

390808dab0f9379ef0bde6b3a854810b
SHA1

513c06e6be2e4471ec1db8dce82a6885a43336e6
SHA256

9bd1bc3ee461d91ce9776be6f72286a5c5d9aa563ba95230946ecc5f933f084a
SHA512

19256cf006e48eb0139462acbc1adc77c48e2c550bcdac280acf7df76db99e4c61aa1ccb3986658db9f84c9647251260f1755dc18fce75079a67d3ab71ddc718
SSDEEP

384:rA4nLg/V+GyqSOYIjlfnZC08Kf3uW4GZipCtp:rAikNyqfZWKP78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390808dab0f9379ef0bde6b3a854810b

Files

390808dab0f9379ef0bde6b3a854810b
.exe windows:5 windows x86 arch:x86

d1fc65f3e7f0724b15147d8dda143509

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

LoadIconW

advapi32

RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ