70d99b7012a5e949f12d655157e27853 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70d99b7012a5e949f12d655157e27853
Size

62KB
MD5

70d99b7012a5e949f12d655157e27853
SHA1

303a3e85c9c57710ff29351ebd50481fdc992e7f
SHA256

792b63e5f8bf015c8c1ec2fbb870e66afacab799f15d3c3c54c3e976bca97aa3
SHA512

a8077f2f7f022e8ef50d74b55a6610873d544dbc8fa289803a3f4b55496e25c1e39c8f72d31c9d4e14f9e3e7a045cf52acda4c84d6c0f6f25a6bde762cf196ff
SSDEEP

1536:zeGJ9fIc7G2G5nr3OxGaXeGFdQTWBuC1aCHP+D5C5Z2:LJ9fIc7G22OxGaXeGFdQTuuC1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70d99b7012a5e949f12d655157e27853

Files

70d99b7012a5e949f12d655157e27853
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 14KB - Virtual size:

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE