c761a4c238024a3c045cdc43a9a6ffd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c761a4c238024a3c045cdc43a9a6ffd5
Size

86KB
MD5

c761a4c238024a3c045cdc43a9a6ffd5
SHA1

d502b2dcfbb00cf6a4dd919ec833948876f5e317
SHA256

35269c993136ba1fc682d7dfcb6369543b17f991620584efc2444406e8ec3f6b
SHA512

2b8a7996c5a13d85fd5faa2c59079b18a424a5d612f1a48b293942f4a8996557a1b1460db1236d58bf0d797741a838d90b942c2912e18aac63ea6417d80a6709
SSDEEP

1536:Ye/WZykTO3r+T7Bul0WDHklsCpn1EgpEgP:2QWL6HklNn1pppP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c761a4c238024a3c045cdc43a9a6ffd5

Files

c761a4c238024a3c045cdc43a9a6ffd5
.exe windows:4 windows x86 arch:x86

a359299f874cb898424ffe422bb69045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
SetCurrentDirectoryA
GetTempPathA
CloseHandle

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ