70115c9108ebba430c8dc461e9addcac | Triage

Sharing

General

Target

70115c9108ebba430c8dc461e9addcac
Size

65KB
MD5

70115c9108ebba430c8dc461e9addcac
SHA1

374e96900bbfde2ed704ce9ef747e57ed80ad466
SHA256

bdbc58e1c502ae755be7abb6fba0e766afdba257d2be769cb64b14069179186d
SHA512

c9229b5290dfca9e09cc345e689765552545f7e70da18c48044e603b55d8471f7e7dd6a1c02494f4706c4e076399ee36b8701f6a8bdab7189d95bb7f941e3df8
SSDEEP

1536:ozRtjtynFU89euy25aeiQiXul3x8fNtQiJ4Z6XMH34:+wFFRzUF3XN304

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70115c9108ebba430c8dc461e9addcac

Files

70115c9108ebba430c8dc461e9addcac
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ