39ae803531da5dbdfed5fa87e774a6fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39ae803531da5dbdfed5fa87e774a6fb
Size

77KB
MD5

39ae803531da5dbdfed5fa87e774a6fb
SHA1

4124c3f42e6f9df9d3922d44f2dfecbeafc1f03d
SHA256

245988dee4cb7d7f58891288109cf7e2bca3c5df7ef4412f6e7d63d79f26b2b2
SHA512

da9636c48963c0602bd900a4fd1cde7f559b307e9c821f80256a34acf7271de7285a96dd666988c03dfc3987ba29d4f70d5297f3a1e54a85098a5fee20f710c7
SSDEEP

1536:ur9hwx2ZMD2vl1qkmzDndQxriRInVJq5wk2w736Wj9bi4:SkGMKPwvndQlAsJOjVb6WE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39ae803531da5dbdfed5fa87e774a6fb

Files

39ae803531da5dbdfed5fa87e774a6fb
.exe windows:4 windows x86 arch:x86

a4dc7f719a7ff30afc2503394118741a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetTempPathA
CreateFileA
WriteFile
lstrcatA
LocalFree
ExitProcess
CloseHandle

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ