74970aac2667b1a23a6dafbdfe7a0c9269132559456566835706121ddd957521 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74970aac2667b1a23a6dafbdfe7a0c9269132559456566835706121ddd957521
Size

119KB
MD5

5415c99d301ffd5fcc49f4b77407b25c
SHA1

1926e43fd5546e4ebe72a13d7d2680062336da6a
SHA256

74970aac2667b1a23a6dafbdfe7a0c9269132559456566835706121ddd957521
SHA512

34d39b6e8316f7e6443d0eacc2cd222c327baabb1ff9a63657d1b759af26c40503e5e42e0054f97223d29c3fcb982845e282f93d9111dd67286558770c59890c
SSDEEP

3072:8Kk/jkzjl7G5Ki8qcCquTfAkDjnwPoLTiQdFIl501Jj:q/il7ch8+4kDjwPo3i6Il4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74970aac2667b1a23a6dafbdfe7a0c9269132559456566835706121ddd957521

Files

74970aac2667b1a23a6dafbdfe7a0c9269132559456566835706121ddd957521
.exe windows:4 windows x86 arch:x86

f8784f00bf4a9d08568a0c7807373202

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvSetKeySecurity
CloseThreadpoolIo
WinExec
EnumSystemGeoNames
FindFirstFileNameW
WerGetFlagsWorker
SystemTimeToFileTime
SetFileCompletionNotificationModes
AddAtomA
GetSystemTime
GetDateFormatAWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE