b697badd102531bd07522e06a0d3f481 | Triage

Sharing

General

Target

b697badd102531bd07522e06a0d3f481
Size

372KB
MD5

b697badd102531bd07522e06a0d3f481
SHA1

dacbb2b749e75c1f14f6eadf2d09bc5e200c5d95
SHA256

4542cc9c571e8afb8e0055cef6224aefa397f9026d58c72bec8e845a135c954a
SHA512

0df9380766b77eb15c77eb09959db50e98908ac65402b73058653fa0e335f70ff262964b581d529f69910056cfe03a7329fecdb9035025d5a9ad1150cf68b8d0
SSDEEP

6144:brRoyoMGGGGGGGGGGbGGGGGGGGGG6GG/DGXxeXJE85PmWyVcjUkdHbIIAgwkaSWx:TKHjljI/L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b697badd102531bd07522e06a0d3f481

Files

b697badd102531bd07522e06a0d3f481
.exe windows:4 windows x86 arch:x86

ee321ea762034f53675dedaa74b424b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
GetTickCount
LockResource
GetModuleHandleA
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LoadResource
GetProcAddress
GetStartupInfoA

advapi32

GetUserNameA

msvcrt

strstr
_except_handler3
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
exit

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE