679290c183764beea28cce385a31a2e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

679290c183764beea28cce385a31a2e3
Size

63KB
MD5

679290c183764beea28cce385a31a2e3
SHA1

fc3bd4124f5fc3abe22e026ca627ced5f3a48682
SHA256

9908146c2b199dffe8f57a2b982f3cf26bd0c3eeb086d865570f45316a1ecfa1
SHA512

4174d6921ff8326188a5b2caf60686437bc4db65541c5694fb53dbac27cb834d131e5f7c547157ae6f3d7ebbb9091c02e8da3891a2dbeba1d28f6e4c3d7c910e
SSDEEP

1536:1Ufiw+85C2be+NUHGYeFrSl3vQLJ1QU0NqlVb:m6w+UCejNUmYeFrqAJ1Qrqfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679290c183764beea28cce385a31a2e3

Files

679290c183764beea28cce385a31a2e3
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ