9701d3f2cf5a36c5f29ebc67840f596a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9701d3f2cf5a36c5f29ebc67840f596a
Size

120KB
MD5

9701d3f2cf5a36c5f29ebc67840f596a
SHA1

06fd5a1679a6a22f20a3e195db641799d4b5d203
SHA256

f488f603420b9e3f265520c15d8c2f84c48d50c3106acaf0b14e57e9d13d72da
SHA512

733d542a363d9015584d34581158035cac165b166fb6a3b8dbe47c61e996f72f516f26f57546fcab6168ee1e3d5501efd3342a7777c673e3cfe3b682001e5511
SSDEEP

3072:SpN7sjpBK1Gk6dzNNG/ot8cXDFxlVkrpIrjqTigwxIJGmm4azX:SpgxZNftxxnkruXqdwxRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9701d3f2cf5a36c5f29ebc67840f596a

Files

9701d3f2cf5a36c5f29ebc67840f596a
.exe windows:4 windows x86 arch:x86

23fa4d4941f828c3ba8291d82fb6a54f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetFirmwareEnvironmentVariableA
SetConsoleCursorPosition
CreateDirectoryExA
IsSystemResumeAutomatic
WriteConsoleOutputCharacterA
OutputDebugStringW
CommConfigDialogA
GetCPFileNameFromRegistry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE