972e3e53d4d3e51d175507188a292377 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

972e3e53d4d3e51d175507188a292377
Size

64KB
MD5

972e3e53d4d3e51d175507188a292377
SHA1

fa3ae759563532806b8032c2cac30bc2156973f7
SHA256

9a399ebadb409599fad85ad43706fed697a4b3e374cc9b28078267834a9456c9
SHA512

2da9c58b58061b2ededc278594649ead36000bc4f7d46c84b27599913a73218366443fd847cb476c06f1f6d8d2c412dd648a09db75134d2bdfe91c7c8d8e82e0
SSDEEP

1536:DUGvdNRZdbeqbttPmsgZ7VJbZWu/ml4Z0jFRjEErxB:hjTthvgZhJbijFRj3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
972e3e53d4d3e51d175507188a292377

Files

972e3e53d4d3e51d175507188a292377
.exe windows:4 windows x86 arch:x86

892ccfce5117a4dcf88e5d19b440ca06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32NextW
SetTermsrvAppInstallMode
GetComputerNameW
ReleaseMutex
GetVolumePathNamesForVolumeNameA
Beep
CreateProcessA
LZClose
FindNextVolumeW
EnumTimeFormatsW
HeapUnlock
CloseHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE