71a66207834ec72045aaec32dbaa0cb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71a66207834ec72045aaec32dbaa0cb1
Size

53KB
MD5

71a66207834ec72045aaec32dbaa0cb1
SHA1

b8f621456d6192d5ba4a31713c59d2098f21dfb5
SHA256

cffabfbc426c6201ca688b068f204bd9fc0d83aa4c1974354ac8ab20358a4e98
SHA512

ef4bcff5406dc7650b8f482c2b34b6903dd7de7bee9f4df003e706a18ad5068b365e440349b691cfdd8f5a1f98b2d499d7e400cfa4198a87b756e04614538d5b
SSDEEP

768:u4KR24jVIXHdCoSN3309lR39ccrq8ntqKEuXjYGTV9hUxpN+ThXmdliPEYGb1f:VK4V3BS130G8nt7tN94p8TJmL+2Bf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a66207834ec72045aaec32dbaa0cb1

Files

71a66207834ec72045aaec32dbaa0cb1
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE