74417ca8845649ed16f7fc154155808e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74417ca8845649ed16f7fc154155808e
Size

11KB
MD5

74417ca8845649ed16f7fc154155808e
SHA1

c3eec678a8eff22f1e703f3431141159e437bad0
SHA256

a2bf4325307e32dae0be6a90330c5683dd20103743eec6e5505abf234fa7b680
SHA512

4ae008bc520426378fc7888ac5de7b3012ff336df3799597cf2f3e4729b013e21d1da5eb02d7da3c69483f4cec3556677d60b5de9890952e9ff59f517a219764
SSDEEP

192:nWd28iB62OjbB2hfn2/TX2iv6JVriYz1uujO1dXqTq72hfOPKD0fo6JI:nWd28iB6pbBqfn0IriYz1uujO1d/qfOQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74417ca8845649ed16f7fc154155808e

Files

74417ca8845649ed16f7fc154155808e
.exe windows:4 windows x86 arch:x86

ff56cfa868b799a26f7beb64c07dfac7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
RtlZeroMemory
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcpyA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ