704d48f62b5931350ff7cbc383741325e2f68dbf23c7db4ede19383bb2652adc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

704d48f62b5931350ff7cbc383741325e2f68dbf23c7db4ede19383bb2652adc
Size

6KB
MD5

b6e1a86c203d482a6df346869579dd4a
SHA1

87540cc990c178e5ad9dff55e846d09f7be6d315
SHA256

704d48f62b5931350ff7cbc383741325e2f68dbf23c7db4ede19383bb2652adc
SHA512

c7e1f1c0806051dd2fccc4c5390c644cecf1c37fd5857f75aff371835e41fc0749a7a6f96e1846f36972e32dcedf7e746419a66547e1f5a57f478eb0766f093c
SSDEEP

48:SBbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uJO:k0mIGnFc/38+N4ZHJWSY9FI5WqCx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
704d48f62b5931350ff7cbc383741325e2f68dbf23c7db4ede19383bb2652adc

Files

704d48f62b5931350ff7cbc383741325e2f68dbf23c7db4ede19383bb2652adc
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ