396a4cdc0179e0f47b847ffc5527d929 | Triage

Sharing

General

Target

396a4cdc0179e0f47b847ffc5527d929
Size

810KB
MD5

396a4cdc0179e0f47b847ffc5527d929
SHA1

093143a9cfdf68ebdaafc619d2cdfb4fb74420c5
SHA256

f5f97994d51d1aa88dd15f4594362802b185d314f000fa2074d51dc0527103b2
SHA512

74cd8a636c1f07b023d3664ea77318f3e2e06eb2bf44462f365e4568d465238a9e77f61e3c07a10a4c73f20f15f01f9da865049cec8658ca13f9467376b5d6cd
SSDEEP

24576:h82olRm0hPPF8KRub4UmyzFfOBWuLKfWc8c4RVVpAZV:a20h1ICmfOBLK2RVVp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
396a4cdc0179e0f47b847ffc5527d929

Files

396a4cdc0179e0f47b847ffc5527d929
.exe windows:5 windows x86 arch:x86

10a3a125ca50ed9e960785f37e71c014

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetProcessHeap
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess

shell32

SHBrowseForFolderA

ole32

CoInitialize

netapi32

NetApiBufferSize

wldap32

ord95

Sections

.text
Size: 799KB - Virtual size: 798KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.beex
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.seck
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.seck2
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ