ad39cd5b8355d4a5fa1aa2e57436cca3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad39cd5b8355d4a5fa1aa2e57436cca3
Size

83KB
MD5

ad39cd5b8355d4a5fa1aa2e57436cca3
SHA1

e575bd751c981dcf72d8d2716c32c22e7c78cc05
SHA256

c64e117f99e24bb8b3c6517bc90db6b234e2216cb28de8f62a369e41c1df9fec
SHA512

4c3122ec80e7d350d33893805d792fc1cd362dfca281f7f8d651f9a2822d98998fbebee0752460b4d719bdc32ee6770cfb05d56a27b05805c3b9029969e63fda
SSDEEP

1536:nDiF8CZYOx1vhf82xIzfcMOi8labbDU+r6wH85QwpjVrs2ryrd1vUQuqwcizSkX:svh6ojlYDU+r6485QwHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad39cd5b8355d4a5fa1aa2e57436cca3

Files

ad39cd5b8355d4a5fa1aa2e57436cca3
.exe windows:4 windows x86 arch:x86

22117139cdd96b5e70c97f9e63141730

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileScatter
LocalShrink
CloseHandle
CreateDirectoryW
CreateMutexA
InterlockedExchange
ExpungeConsoleCommandHistoryA
SetVolumeMountPointW
GetModuleHandleExA
SetConsoleCommandHistoryMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE