3978359e270dbbaff07215f2f84cc190 | Triage

Sharing

General

Target

3978359e270dbbaff07215f2f84cc190
Size

46KB
MD5

3978359e270dbbaff07215f2f84cc190
SHA1

dc30c3448a09373e9f01748d0f5d860f3e991cbb
SHA256

8fcea73d785d7d49fe94eaa8dab4a675bfdb8825df1acacfbea88e3b411b84aa
SHA512

a03299c4b4f56dd0de3921639e47f5d58fa6a573a53446867bc1e44de433f277bb62b742630cd2b53fb7d2375d62b3d5dc5aa5af0766af38d82945a9488d3f01
SSDEEP

768:CL3m+2CdsTZs9LppnG73VObGIyGsuFbDBqxKVN/o7o3cGuvhgUA5eMGCk:CT2CeTZEdtG7Qj19q8AU3cGixA51GCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3978359e270dbbaff07215f2f84cc190

Files

3978359e270dbbaff07215f2f84cc190
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE