39c434f2e5276623b0f8e052f2e22c53 | Triage

Sharing

General

Target

39c434f2e5276623b0f8e052f2e22c53
Size

63KB
MD5

39c434f2e5276623b0f8e052f2e22c53
SHA1

59c6f5281e9dde10578dc835edeeb0f42d49ec59
SHA256

18ebc7a4cc52deeafb4a1c8d847346574e8d8565bcae75c001ec13b8c3f81b8e
SHA512

9cee4bcd61c5928767460b26606a4d28e263a60609482c0e601eb6d7ac512190403bfb79e92b38301a9b5ca9db11ef17c190ed36a373566a00fe4c5eb4696adf
SSDEEP

1536:/j0Q6Zr1CmXIBamMPqd2kWWFZmbmzHPHiK/x9RJf9KkoS7kdxobF8:/jfTBDMPhCzPHic9R19Jo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39c434f2e5276623b0f8e052f2e22c53

Files

39c434f2e5276623b0f8e052f2e22c53
.exe windows:4 windows x86 arch:x86

098eda2c14b78cb874b9cccaccf58378

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
CreateMutexA
GetSystemWindowsDirectoryA
FreeLibrary
GetLogicalDriveStringsA
GetFileSize
MoveFileA
SetEndOfFile
GetStringTypeA
lstrcpyn
FindFirstVolumeMountPointA
GetConsoleCharType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE