70993af369c1515d57582eca676ba213 | Triage

Sharing

General

Target

70993af369c1515d57582eca676ba213
Size

407KB
MD5

70993af369c1515d57582eca676ba213
SHA1

6f6b9251bcda2f73733dc969af7f0821617e59a7
SHA256

e3d292ce4f5bfec8b177e52504dd03046795938a91b4c00560367e13016e3301
SHA512

f824042315362b2c8bfff66e8a3e89e53d1acfd2dd2bd1deb618522a8ddd433df0a0adb7d1ea38bdf0df4a38f3d9085aad438c4a5e2eeb30cab0cf3af2648ed3
SSDEEP

6144:rMDmO6XsxLeAEKT8OmGW3TS7moyepYbkA/B5Z+zd:rMUm7qEgkKTZ+R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

70993af369c1515d57582eca676ba213

Files

70993af369c1515d57582eca676ba213
.exe windows:6 windows x86 arch:x86

76cb49957629b5fe0d40d13588a8762e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
WriteFile
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleW
GetProcAddress
LoadLibraryA
LocalFree
lstrlenW
WideCharToMultiByte
EnumTimeFormatsW
GetConsoleOutputCP
WriteConsoleW

user32

LoadStringW
MessageBoxW

ole32

OleInitialize
OleUninitialize

msvcrt

towlower
malloc
memset

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ