b94fc10d602564a84773a28af336833a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b94fc10d602564a84773a28af336833a
Size

292KB
MD5

b94fc10d602564a84773a28af336833a
SHA1

1af487f811d32660ffc7388e410d02513a3d6fb3
SHA256

dc382a02372b0e45483abe6a935bb27ad149433268eb294d89728d7c641ff7e9
SHA512

a8bfe75113840ed3f74190059f3e5d67cce24d9690237a7d5aa5770e06b631285e0be5d8bdaf9441e9c843a39f81f0bf3a2be2205c7d0c42babfc8b00ec1b8a9
SSDEEP

6144:9cxp2HPd8GIKBmZ5RSUJN1Xs3cZcQXdY5N+:qxpmPdgl7f1XssNY54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b94fc10d602564a84773a28af336833a

Files

b94fc10d602564a84773a28af336833a
.exe windows:4 windows x86 arch:x86

dfa4ce5a0e3fb9ff8d84ee5577612167

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetTempFileNameA
VerLanguageNameA
GetTimeZoneInformation
SetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ