b97c0e3c2cc939e1b4c8a62ad5ccdd20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b97c0e3c2cc939e1b4c8a62ad5ccdd20
Size

57KB
MD5

b97c0e3c2cc939e1b4c8a62ad5ccdd20
SHA1

30dc542667fdbe3fc1cd7827d70ab5c82cb4f265
SHA256

cb74bd3616a804ca6cc69a69f20220273076f6d983dd411192220c44e9eca3a6
SHA512

be97db7e4f7b1cace83bc69db13dc517a84aff431483a9a098157a857d4b985f450c30a92524a1950b9e144d3466b61046f0342b56329ccfa6d1af8c49e597f6
SSDEEP

1536:dS5nCIK5oAuKP80NyEjxIhGP5+6q+Tz7h:dS5rAY0NyIjIdUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97c0e3c2cc939e1b4c8a62ad5ccdd20

Files

b97c0e3c2cc939e1b4c8a62ad5ccdd20
.exe windows:4 windows x86 arch:x86

36e1820d27b3e70804a7e91b356b3115

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CloseHandle
lstrcpyA
lstrcatA
WriteFile
SizeofResource
LockResource
LoadResource
GetModuleHandleA
GetModuleFileNameA
FindResourceA
ExitProcess
CreateFileA

Sections

.text
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 442B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE