570a88864d20dac90d0e991d32245e63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

570a88864d20dac90d0e991d32245e63
Size

2KB
MD5

570a88864d20dac90d0e991d32245e63
SHA1

e933326b0634f4806b3271fa3c7f1e3d26b97158
SHA256

89fb7ec65dee5c5eb98fb9e02ce2099b68bec0254ead0ba42d7849c514996389
SHA512

21dd9d33f4feb699d288e09678403e1cc2d4f8f76d173e64e206f91ecc79e6d017b51d2791ca32e42faab93685390fef84c31bb8e000f1625edd84053b3664ed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
570a88864d20dac90d0e991d32245e63

Files

570a88864d20dac90d0e991d32245e63
.exe windows:1 windows x86 arch:x86

be13e78c8820ec686348b32426a679fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
ReadFile
WriteFile
CloseHandle
GetTempPathA
GetTempFileNameA
CreateDirectoryA
GetModuleFileNameA
SetFilePointer

shell32

ShellExecuteA

Sections

.flat
Size: 1KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ