72f260ff33cfd932a94424ca95ade3ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72f260ff33cfd932a94424ca95ade3ec
Size

40KB
MD5

72f260ff33cfd932a94424ca95ade3ec
SHA1

51a5355a25957657b98e962bdb4c889464468479
SHA256

7b9bbe428d0fe625825de95cccc959b78799eaef96a74bac77f9b6e22df5aeeb
SHA512

16c325f2eb1dbcca92f8cd46696317a4dc6ad33a78ec97e14b808f1fac6eaebbd3757c72cb762454ad0301c4f82a5afc48a5b0358380fa365cecb1e510b3fcd1
SSDEEP

768:t3h9xMiUybFul4v6Z8wEzxgR3+Jbkk4VpJU3+VRZXx:lLU4FyY6uTzxs3+Jbv4VzPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f260ff33cfd932a94424ca95ade3ec

Files

72f260ff33cfd932a94424ca95ade3ec
.exe windows:1 windows x86 arch:x86

3c1690902b9efc6dd489276e1f23d6c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
RtlUnwind

crtdll

__GetMainArgs
exit
fclose
feof
fgetc
fopen
fputc
fseek
raise
signal
strcat
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 596B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 692B - Virtual size: 692B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE