70a9138acbb1e424131acda69d7f0440 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70a9138acbb1e424131acda69d7f0440
Size

2.0MB
MD5

70a9138acbb1e424131acda69d7f0440
SHA1

de312e74e869c06e6f1b695128aee37b2606b340
SHA256

574c63f770d2d04d6f857e363408e34749855d28ce94d5d5d7e46f16ea5881a1
SHA512

ff36569c8ad36044434d9f650a2746a334f7d82e2693adc7fd7f3a39a9ab1e2f8f406d71156c3d6e4af24233897b4cbcd0ecbd2db82bd6b98df06fd58a094d19
SSDEEP

49152:+JqIfzwVVKPdBBsF1tPzlcObkQH5gURHmOHWyn0JEtUiYJE:+JLMK1/Y1tPzmObko5dRHmO2y+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70a9138acbb1e424131acda69d7f0440

Files

70a9138acbb1e424131acda69d7f0440
.exe windows:5 windows x86 arch:x86

0931e97555ac33eb10aa9539fe890070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetSystemInfo
VirtualQuery
GetLastError
MapViewOfFile
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
CloseHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 4.7MB

.idata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ