b792d7541d10a47bba1ccf30b7c1f7c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b792d7541d10a47bba1ccf30b7c1f7c9
Size

29KB
MD5

b792d7541d10a47bba1ccf30b7c1f7c9
SHA1

61df65d80d3255489f13433270f66d1aac0d8f05
SHA256

e31ab2901d927ea2648a16aa2eba691253584349cec2aa862a56835ac5bedbdf
SHA512

38905742debe018177bb9160b05828d4f8f20a9f1b6f1a9da0c9f27e9d278c66eedff36b87914365b66bd61801fa24be963ea02c6717840f96babb500791bd18
SSDEEP

384:Rvpl7JPmMEbPVmIXlUQgCXEOXj1HeaKTLEW80mPOWK/9bjh1RtMq:Rv7JPmMEYIVrXEXaULHfmPOWK/9bjT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b792d7541d10a47bba1ccf30b7c1f7c9

Files

b792d7541d10a47bba1ccf30b7c1f7c9
.exe windows:4 windows x86 arch:x86

9184367f8d1f9986888f0eed2e6f8bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE