70af4931cf6b8b1fd4199de2fd8f8638 | Triage

Sharing

General

Target

70af4931cf6b8b1fd4199de2fd8f8638
Size

76KB
MD5

70af4931cf6b8b1fd4199de2fd8f8638
SHA1

37cd47b074a0dd433ba83210d0c4e24ed66abc25
SHA256

68da041e807d03bfe6f1c3e0c49cbbb32df1661bedd0d5a65e56a3b6052062e4
SHA512

efdd640bce86731585c96549901f2d9f53cdcbcb4eea83c8108b67172bba6e4907a97cb0b14dccf3b8465adc919ed3ed8d71c1439fc6889b52390be3f53f703a
SSDEEP

1536:2r8t/U1zGmDzpbfs9ekthBpoJW/grHZKPDRQKTlpjVrs2ryrd1vUQuq6:XtiznpbEUk52oz9TlHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70af4931cf6b8b1fd4199de2fd8f8638

Files

70af4931cf6b8b1fd4199de2fd8f8638
.exe windows:4 windows x86 arch:x86

3e9b8d01baed5d2558fe5a6a6aa71748

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
CreateHardLinkA
ResetEvent
CreateMutexW
EncodeSystemPointer
SwitchToFiber
GetNlsSectionName
EnumCalendarInfoExW
CompareStringA
FatalExit
GetExpandedNameA
lstrcpyn

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE