c92fb5497e0c4bb8034fa313127ae322 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c92fb5497e0c4bb8034fa313127ae322
Size

79KB
MD5

c92fb5497e0c4bb8034fa313127ae322
SHA1

972272397d544530bab5b48db50ed941c014b2ba
SHA256

3d3fbd900dc91ffea133f7e18ca950a6d7975c19ff196ea94501d3aeaf6ed288
SHA512

65fc96a639f7d563fe2d4207b4836b167e066624a968ba715a6561b5268365bcfbab4b60483e7dd46cf01a3e3c87a617d108fa6cddc82c75c397b6783ee8e4fb
SSDEEP

1536:6vqkbdS71Vd1J72OBoyHO1dPT91mrkqk4ImRfmb7A9d:iqkbqVzlRSyHcwkqkemb7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92fb5497e0c4bb8034fa313127ae322

Files

c92fb5497e0c4bb8034fa313127ae322
.exe windows:5 windows x86 arch:x86

afeff9000c6e466ff4f2110cbbc574d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sin
_except_handler3
malloc
strcmp
exit
free
_acmdln
strlen
printf
_adjust_fdiv
_onexit
__getmainargs
fopen
_initterm
fclose
_XcptFilter
_exit
__setusermatherr
fread
__set_app_type
fwrite
fseek

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ