d479f8ccbbc0abfb97ee1622d6f2fc00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d479f8ccbbc0abfb97ee1622d6f2fc00
Size

295KB
MD5

d479f8ccbbc0abfb97ee1622d6f2fc00
SHA1

d1b792bbeec0f028384d930dbdeb3c97f30425a3
SHA256

354736c081aad268618659f704f5422fbbb6dfa80c7e3df276de3e697996ec70
SHA512

34f675a5caef11190fb3ef5c724ca8afebd6e60a8913d36aaf96fd13b60fff2b73bd126f28d608758ff4a5b2aa847127ae18d1ebbca54d7283ea1d86edbb9938
SSDEEP

6144:RREcteITJRWXwQ0CtOWmJeDwnc28TscTlySQ+cdYrP6cQZIK7wDS:ttrTJMMCUywn0TjzcdeDeIzDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d479f8ccbbc0abfb97ee1622d6f2fc00

Files

d479f8ccbbc0abfb97ee1622d6f2fc00
.exe windows:4 windows x86 arch:x86

5b809af1ef3a9f5a38f287d08bf9349a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
WaitForMultipleObjects
GlobalLock
GetVersionExA
FlushFileBuffers
CloseHandle
SetErrorMode
WriteFile
DeleteFileA
lstrcmpA
SetFilePointer
HeapCreate
WideCharToMultiByte
CreateProcessA
GetStartupInfoA
LoadLibraryW
ExitProcess
HeapAlloc
GetProcessHeap
GetModuleHandleA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_strcmpi

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ