72ebd4ed4d2adde7779152ebc1e1fd47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72ebd4ed4d2adde7779152ebc1e1fd47
Size

1.2MB
MD5

72ebd4ed4d2adde7779152ebc1e1fd47
SHA1

97385b543bc69fe8cad322965e2aa12a448f11db
SHA256

e32f646c4f1ae583a21c8631008c1cba47edcbffe69578a2187ac5be68d8eb4d
SHA512

c0f9b3759c7ae215266eaf46e7e68a3bb3b87e9f87b56c5855d9e8e1ac2766c381642329bd8d9844556968c6de1d530ece0072b5d5b43ead23064714523dab42
SSDEEP

24576:3n0RlVMOt7vNciJVG88xPOLTsVqTK7NfPWFApjgo8GdX+9u:30RlVzmiXCxPOLTsIT0f+CBgoBdXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72ebd4ed4d2adde7779152ebc1e1fd47

Files

72ebd4ed4d2adde7779152ebc1e1fd47
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ