70b65565510209ccf39a7effdff92a24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70b65565510209ccf39a7effdff92a24
Size

80KB
MD5

70b65565510209ccf39a7effdff92a24
SHA1

11cb8e0bf356ad369642917ffa2211115662a556
SHA256

e0fe91d5ecef548348c40ebdf8410114e985ec4419e915bccc72768e22aa1d84
SHA512

049b748e7dad38cc56ad90cb52882e32b308607aae5b299ab7eb80e8f7d470f9a29d73c37405169230430f5b83b8f0e99212eaad78c5a9871f398298f6fab4c5
SSDEEP

1536:5MhoE7p4FNNDDfZv3tEr1Bssw3LyGEPmQo9owbR5+R4PZ0wDBRBGkt:542FNpjErsjjD53hLLBGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70b65565510209ccf39a7effdff92a24

Files

70b65565510209ccf39a7effdff92a24
.exe windows:5 windows x86 arch:x86

4d41e185cc86c384d6b75767f953dc16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetVersionExA
GetEnvironmentStringsW
GetCurrentThread
GetPriorityClass
GetTickCount
GetCommandLineA
GetStdHandle
CreateMutexA
GetEnvironmentStrings
CreateEventA
GetCommandLineW
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW

shell32

SHQueryRecycleBinA

rtm

RtmFindNextHop

msvcrt

__p__commode
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__dllonexit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ