70a275cc6f70bd3e345a1a30bd824ff0 | Triage

Sharing

General

Target

70a275cc6f70bd3e345a1a30bd824ff0
Size

118KB
MD5

70a275cc6f70bd3e345a1a30bd824ff0
SHA1

0eb91941c55d4d68df7a4d605636ae82f0edf2f0
SHA256

2940b2409ceffc79935cd60bd5db8ffe1903243d436927ff8aae91177e141095
SHA512

814dc413b78ae0c728456240bdb70bf9ace974c0eac6319a388984bc7a3885b7feb7b674d38effb47dc597beade9a64681d6053792a9df083292de5c9901c5f5
SSDEEP

3072:ZG+BA6QpgKhJmTMHgdLzEynFWc2Z+QG0P5GbKh2Y:ZLA5GJQAdLzjFWcsP5GbKh2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70a275cc6f70bd3e345a1a30bd824ff0

Files

70a275cc6f70bd3e345a1a30bd824ff0
.exe windows:4 windows x86 arch:x86

35a4942e0773bf7ba132e0584d0e06a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

user32

CharToOemW
CreateIconIndirect
FindWindowW
GetClassWord
DestroyCursor
GetMenuState
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE