c472e6f364980bc9efe945a4f47b4ab5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c472e6f364980bc9efe945a4f47b4ab5
Size

326KB
MD5

c472e6f364980bc9efe945a4f47b4ab5
SHA1

a048663a29c5bc0c98e409838fae3870b9c31e9e
SHA256

dd8d68a382dabdc377b50e8f1a92f3062e2d476880eea52aa5f48206590784af
SHA512

2480399d60591667b917bbbbc33afd25fcf58debc584361d5755209dddb8e1465eae1961be298edf0a96f2ee3b3e403b466aa2aa0347838b714c6f1fe7b21af8
SSDEEP

6144:Z373/ZrB3HqdnV2ykZcv/8p8qnIPWr5ym2HhDDIcblAszDPV8sq:J3/BB3HqdIySc68qIPWr5khDDIlKusq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c472e6f364980bc9efe945a4f47b4ab5

Files

c472e6f364980bc9efe945a4f47b4ab5
.exe windows:4 windows x86 arch:x86

f21e05129dc91033c5f7f93bbcfb525c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 260KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7nhr7bh6
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zoqcitik
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ