670a40f795713b62d2aad7f3084ce955 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

670a40f795713b62d2aad7f3084ce955
Size

38KB
MD5

670a40f795713b62d2aad7f3084ce955
SHA1

8ecf9533323dd39430e2441168d01c0ecf6abf4b
SHA256

2139456bdb41dc6f08045f2b98837804224caa057ca6fb639ec78621700aa1cf
SHA512

6ab63fd984d81b47a999a3ce70de96e25b7c0773615ceff40d10dcdf03bd5c5b37f5a61d9af760f36d5507c34f456b392cace60e87668481d63379a19c5d5c47
SSDEEP

384:pFAfZgDSmlib7khy8TksSDaic/XOEnOmjr6bUSwholgAIWCMrUj:pFAyQfiRks7RtOQ6bUtihC/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
670a40f795713b62d2aad7f3084ce955

Files

670a40f795713b62d2aad7f3084ce955
.exe windows:4 windows x86 arch:x86

80fc53a5dd6d7d846b4a1de5fdb138c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
WriteFile
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
CloseHandle
LCMapStringA
GetProcAddress
GetOEMCP
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetLastError
Sleep
FreeEnvironmentStringsW
LoadLibraryA
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
RtlUnwind
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
SetStdHandle
GetCPInfo
GetACP

ws2_32

Sections

code
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE