884a270e47067ea7256cc7e6f238782d | Triage

Sharing

General

Target

884a270e47067ea7256cc7e6f238782d
Size

4KB
MD5

884a270e47067ea7256cc7e6f238782d
SHA1

1813992b0b5ccfa883c77013a0fa0b6453b7a152
SHA256

c1de5613e5a7cef3d62c98f5cd52304408a1f865c189af886629e6569cba5ac8
SHA512

6072c1b6229530a06d8a250f15d5229a156575943c139a31bc7aae7f5fa937dad4dba26598b0b94ee34eccee2809ee08d0ec45780a09cf463c08b4f9f4cab796
SSDEEP

96:UE5Cl45C5Yz5m5QRF5t45ivd5u5Dua71xrBg:zeaSSSizaDuaRxrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
884a270e47067ea7256cc7e6f238782d

Files

884a270e47067ea7256cc7e6f238782d
.exe windows:4 windows x86 arch:x86

4159a86083502cf1c324e288867647b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTempFileNameA
GetTempPathA
OpenProcess
Process32First
Process32Next
RtlZeroMemory
GetModuleFileNameA
Sleep
TerminateProcess
WinExec
WriteFile
lstrcmpiA
lstrlenA
ExitProcess
DeleteFileA
CreateToolhelp32Snapshot
CreateFileA
SetFilePointer
CloseHandle

advapi32

RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ