97d212aa8c2eb7164dfcc60014b3cca9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97d212aa8c2eb7164dfcc60014b3cca9
Size

30KB
MD5

97d212aa8c2eb7164dfcc60014b3cca9
SHA1

d73756d7bfdcb6034c340d26fd31981804fa896e
SHA256

b9e1205d9e44e89eaf8c479cccbf5fe536189310fd91f56d9b70f4cb423000b6
SHA512

13a14bf259bc6fbf5cc4d0f17541e092197cc4591f3415058b2a193421235250ce8dff2d99c57ce79808000dd5830ec25e33d09371a84d0674152b10c5145a3c
SSDEEP

768:Zoe18BjY9rDcUTgGApUthAjwCqQ7JE3By2ezMYi8g/Tcae:Sk8Bs9rDcUvOBqQJzMY2pe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97d212aa8c2eb7164dfcc60014b3cca9

Files

97d212aa8c2eb7164dfcc60014b3cca9
.exe windows:4 windows x86 arch:x86

3769a62a90e5babda27e69930c27a315

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetStartupInfoA

shlwapi

SHDeleteKeyA

msvcrt

exit
free
strcat
strcpy
calloc
strlen
fclose
fwrite
fopen
malloc
strcmp
memcpy
_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ