97e794aaf8785ee00a425088f19ac6a4 | Triage

Sharing

General

Target

97e794aaf8785ee00a425088f19ac6a4
Size

76KB
MD5

97e794aaf8785ee00a425088f19ac6a4
SHA1

8bbcb7e2c5e82fc5ac239f30e28c61e51f06c5ee
SHA256

19e644544dcc1f40d7460a7b8bc70731bf156d70bf13bc6a69c18c07968e4045
SHA512

491f2200c533369df7b520f57e19959e099a34fb37ec91951e86117b3a40c890583985cf6efce7a76f63567105bd133cb9f1717b873291d42689256e5267e204
SSDEEP

1536:VrdJq+OaMgOb/xNxuJLlxHfSza/BugzmbLpjVrs2ryrd1vUQuq6:VS+TMt/YlxKzABu1HHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97e794aaf8785ee00a425088f19ac6a4

Files

97e794aaf8785ee00a425088f19ac6a4
.exe windows:4 windows x86 arch:x86

fc7d880769a340ae8b9cbb9db2de34d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
SetHandleCount
_llseek
GetBinaryTypeA
CreateJobObjectA
FileTimeToDosDateTime
SetPriorityClass
SetFilePointerEx
GetStdHandle
GetProcessVersion
GetWindowsDirectoryW
EraseTape

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE