c39de5fd9ad77451971342d82651430d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c39de5fd9ad77451971342d82651430d
Size

77KB
MD5

c39de5fd9ad77451971342d82651430d
SHA1

1845c1051379d7718f1834d1b44a3916754d67e7
SHA256

52e9b62886e73c6108edc54302938f360c3d47b37763f86819758ce843f6f1a0
SHA512

0b1e3150a8193b4cb2dfdb15a7e8fd7d322cb20b7a93f701202969777006f236107ed149fc9096dc418052da1063cff8ae638b38c48d0aec4cfbdcebd896002c
SSDEEP

1536:2OIfD+1xdcetG4h2dnqIXixDe06uTv5TVAgTgeYAaZdCTh8IUqWak:bSD+1Mna2dqHDgk5TGaYPdmxxWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c39de5fd9ad77451971342d82651430d

Files

c39de5fd9ad77451971342d82651430d
.exe windows:4 windows x86 arch:x86

0ac6b7a56e5b1000518fa8152b7a7cd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComPlusPackageInstallStatus
ResetWriteWatch
GetStdHandle
WriteProfileStringW
GetVolumeNameForVolumeMountPointA
DeleteVolumeMountPointW
LZCopy
GetConsoleCharType
GetModuleFileNameW
GetQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 62KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE