39a30ba36c557fe58baa1dc11fa5f61f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a30ba36c557fe58baa1dc11fa5f61f
Size

29KB
MD5

39a30ba36c557fe58baa1dc11fa5f61f
SHA1

ad63a0d603d16bb5c5706839249bc42b88259a8d
SHA256

0e552221c2b703877796a8719c4861881dd57ba397d295de17ef4d74e37ecf3e
SHA512

ddc9086fab6ba8c4ccf0511b74a69f2f23b3a42944743f443108828bbdaff87486fe9dbb2a72e5ff773cb0fb6dfeb14e6d2549c853258e0e837f6c4cd63a5f90
SSDEEP

384:Odm46jZvaDYQflkNt2FnGmyFbza0FbNdk7ll0wc6/LplxODH1ZtAjm:ZPCUQ9kOt8Fna2jkxlMSLp/a1Z4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a30ba36c557fe58baa1dc11fa5f61f

Files

39a30ba36c557fe58baa1dc11fa5f61f
.exe windows:4 windows x86 arch:x86

3e61ad933671ea381b82d9313940ef03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextChangeNotification
SetLastError
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

text
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ