c707e1f36bcbc835a2df730e06371105 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c707e1f36bcbc835a2df730e06371105
Size

123KB
MD5

c707e1f36bcbc835a2df730e06371105
SHA1

972f3c984d7a694c644076e944bf6f57ed11d506
SHA256

4af2fb4eb87dbbabfd191da342da514ff5369f17889950c9d074dbd7703860aa
SHA512

7d278718d1f7099f89754d866a49b9e08df0ebd5ac66c9fe061e02635ac84a57436b1648e73641553f29b51942914483b3719297bd700bab076953caced8f87a
SSDEEP

3072:hqWCJru5KcHYEsOY8ecCfFWCJru5KcHYEsOY8ecX:hqWCpc4IY8ecCFWCpc4IY8ecX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c707e1f36bcbc835a2df730e06371105

Files

c707e1f36bcbc835a2df730e06371105
.exe windows:4 windows x86 arch:x86

54b6b0c7951b06817775b2d480b18450

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
LockResource
GlobalAlloc
LoadResource
SizeofResource
ExpandEnvironmentStringsA
CreateDirectoryA
SetFileTime
CloseHandle
GetFileTime
CreateFileA
GetSystemDirectoryA
WriteFile
GetLastError
WinExec
FindResourceA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA

msvcrt

fclose
printf
fopen
sprintf
strcat
_access
memcpy
__CxxFrameHandler
_EH_prolog
??3@YAXPAX@Z
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ