d4c05c78207182e6f7760201771ab716 | Triage

Sharing

General

Target

d4c05c78207182e6f7760201771ab716
Size

119KB
MD5

d4c05c78207182e6f7760201771ab716
SHA1

58f196ae382fa802c1548467cb50fc28f6a166d9
SHA256

53c8c04efeb89f7273ba647f32bb77b15fdeadd6199b917925845ec249998135
SHA512

3c8461cad32f4c5bd3d590ca197e056fd50c8d8b7b0e28a7bc779fb217294c4526dc3e75731f690c03925f63afdfe62ad376328b02e7d3733a798cc9038cb4d3
SSDEEP

3072:0DWKeDmZ+GFU7OLihIpUnnLQ0KcIxwgjnnnGeby7nFnnJQAkxVgHy:2KGFUc6bKTDVV9wy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4c05c78207182e6f7760201771ab716

Files

d4c05c78207182e6f7760201771ab716
.exe windows:4 windows x86 arch:x86

b3cccd80b1299a52f5d16fd72d19969b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
BackupWrite
ReadConsoleInputA
LoadModule
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ