648e1df3a8a3dac49c36ca68519cd170550123606acafb1ce4e26aaf41813446 | Triage

Sharing

General

Target

648e1df3a8a3dac49c36ca68519cd170550123606acafb1ce4e26aaf41813446
Size

58KB
MD5

6a9e3d6a96f4fee7a83b29248b80bf87
SHA1

015584b559ec37f3f871f823a4b7c2eacedf5db6
SHA256

648e1df3a8a3dac49c36ca68519cd170550123606acafb1ce4e26aaf41813446
SHA512

f7855969b64effd7f66e6190b5b08d6f5308ebb71d39ea7bced79f43132c1bb9a3ca9fb0338a3494eca44bd1223383a035e607595472db3f25fa03694a21cc96
SSDEEP

768:eApQr0GvdFJI34qGxusOy9Rp1pLeAxoeC48PqK1OtaP6qlhqy5Gi0AGw+Zd597P0:eAapJlQsh7pWezEPLV65HVS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
648e1df3a8a3dac49c36ca68519cd170550123606acafb1ce4e26aaf41813446

Files

648e1df3a8a3dac49c36ca68519cd170550123606acafb1ce4e26aaf41813446
.exe windows:4 windows x86 arch:x86

7ecd8f76627cb5379a7c0b0c02b48c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
MoveFileW
GetSystemDirectoryW

shell32

ShellExecuteW

msvcrt

_wstat
_exit
exit
wcscmp
wcscat
fclose
memset
fread
fseek
_wfopen
fwrite
wcslen
wcscpy
wcsstr
__p__commode
wcsncpy
__p__fmode
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
_wcslwr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ