b976eb1dd202291fbc426184461df80f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b976eb1dd202291fbc426184461df80f
Size

16KB
MD5

b976eb1dd202291fbc426184461df80f
SHA1

cc7341f6e4c720cd6cf3dbdf3a49c4b387d6e47a
SHA256

ebbc79090c76bda448d8f8fa6fc46f85137e0290d4da9a62082a12dd0699a3a0
SHA512

67ee8e908687cff13e00c4632b0cce651572afa6a2fbebda181f635837210d894e241448dff1bf6f58d0c07bbdade2e8823409e6983f8022c1e0ab8b2d409cbf
SSDEEP

384:+/C8Pmo8PVDLoPnDFBNu8SecuqfoNYz0S/fe:+C8PuPF6FVdcu2oNS0S3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b976eb1dd202291fbc426184461df80f

Files

b976eb1dd202291fbc426184461df80f
.exe windows:4 windows x86 arch:x86

67472e2462aef9c02de2122624c57456

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ