b93763715f666eb5007bad40fb12e573 | Triage

Sharing

General

Target

b93763715f666eb5007bad40fb12e573
Size

16KB
MD5

b93763715f666eb5007bad40fb12e573
SHA1

8be4117959521c0656e73ea9c62646114d60315c
SHA256

72927d5267651009ae76290ac615c1c337ea5d5fd4f6b86275f364d0e87b681a
SHA512

c17e9e4fc1599406de06cf144f8c641d6ca0e6a5e72c84cf96f74bd76b624595c005f710a1863e0dac6c13e83449a243ccfd8598bc30565f0ed99ab83eabe631
SSDEEP

384:STyfMzbF8onBCm+Zv7SVystmiFEzieEEWEMvGpj3b1mP7:GyMHFvlsCxtNIi1Ej/jb1mT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b93763715f666eb5007bad40fb12e573

Files

b93763715f666eb5007bad40fb12e573
.exe windows:4 windows x86 arch:x86

4c628eb3aa6589e9b0b1794ec226f732

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
lstrcatA
lstrcpyA
GetTempPathA

shell32

ShellExecuteA

Sections

.text
Size: 493B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE