978fe1705314da6c562c46a8f7a1dad98b61c48c5f79433784b9057e24dbe1f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

978fe1705314da6c562c46a8f7a1dad98b61c48c5f79433784b9057e24dbe1f5
Size

71KB
MD5

394e4981bff379185200b680049e5c6e
SHA1

3877fe928ead0d2bfda50e1263a477b967599284
SHA256

978fe1705314da6c562c46a8f7a1dad98b61c48c5f79433784b9057e24dbe1f5
SHA512

f65f191850321996cea2a13dcba8088254c3082f436ffe4b793720753f180b43985e25bc4106460b7b6ba536cbab3aebc3572206f04c08cece12494ff284b938
SSDEEP

1536:1l52iwhqb1tqObPvZkcUbSpx7/wteyNj7:P0PhqZ/TvZtYSXceKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978fe1705314da6c562c46a8f7a1dad98b61c48c5f79433784b9057e24dbe1f5

Files

978fe1705314da6c562c46a8f7a1dad98b61c48c5f79433784b9057e24dbe1f5
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE