b70e6f33ec82dbc6b79dcc4250c59a34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b70e6f33ec82dbc6b79dcc4250c59a34
Size

52KB
MD5

b70e6f33ec82dbc6b79dcc4250c59a34
SHA1

6c3e108771cae3bce6459409db48b10fcd627710
SHA256

77ee47b34c42c774f5903d3b491d1905d038cef77a4e7eb157e66ff2e90e329f
SHA512

8441726cfb2ffabf66c6d1764da8afa47304e2806356352d49706a9d5eef2f5f7164db63c363847eb5ac1df8f43a4401c35566b3ec51de69d078e128257ecbed
SSDEEP

1536:LJ9WclSbOCCJ5Pex8rtMEG2dOMDVdc8LryLaUb+jFBr4KOssy0ijxERb:LJ9WclSbOCCJ5Pex8rtMEG2dOMDVdTtS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70e6f33ec82dbc6b79dcc4250c59a34

Files

b70e6f33ec82dbc6b79dcc4250c59a34
.exe windows:4 windows x86 arch:x86

dbdb0525986cb60465f8680544bd9d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE