418bbceaa7e290adc82e1cdb84cd2092 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

418bbceaa7e290adc82e1cdb84cd2092
Size

95KB
MD5

418bbceaa7e290adc82e1cdb84cd2092
SHA1

6cb86ecbf1fa2af5361750514e60f7adf4b6c301
SHA256

3933bd6bb6759ee4457a7456a0e4f9154f2d1ab04e5e01d591c1b973365d9c86
SHA512

ee3f8beb95fd0d70de0a8a4260023499c23a4129737507bbbe1ac346beb07aae3ef418868ebab87f98a6401e5deafb93160d4c275e1009d150889c04b6830098
SSDEEP

1536:irltI42wfuVLkjJr4qq02QCs3Wae+8uwzuG2VjeqhO/XBBkhsPmDXp3NQ+UV:iTgUrUsmA8UfVKyGXBQsPmDZ3NHUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
418bbceaa7e290adc82e1cdb84cd2092

Files

418bbceaa7e290adc82e1cdb84cd2092
.exe windows:4 windows x86 arch:x86

2aaef99c3bb63fe0723bad601bc7871e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
DeleteFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

calloc
strlen
fclose
fwrite
fopen
malloc
memcpy
strcmp
strcat
strcpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
_exit

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ