de4a71dc329a4599353856de7e991ff9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4a71dc329a4599353856de7e991ff9
Size

28KB
MD5

de4a71dc329a4599353856de7e991ff9
SHA1

30798cfbd1b59a9f6ace70332cbb23982dbcde91
SHA256

5396b7490fafcb80fd89287454958e725eb33357939f148ae2177b86a40ab3ed
SHA512

af46a86d1c1ba96d698d641b89f82f1f89b22acb99795d50b2054b6c724a74bc5ae0f25d069192e94b35bb9303a334d8a94ab2884289f732784937d3ad0e8b22
SSDEEP

768:+7qRdsqgjZtvARNPWc0a8jCGgMsklkzEYcFsuJUkawgoBXgZLMDdRel/pcIoEtej:DsqBYh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4a71dc329a4599353856de7e991ff9

Files

de4a71dc329a4599353856de7e991ff9
.exe windows:4 windows x86 arch:x86

5ca319a36f92ae627f9c34ef913e9a73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp71

?_Nomemory@std@@YAXXZ

msvcr71

atoi
strcpy
strcmp
__CxxFrameHandler
strcat
exit
strtok
_vsnprintf
strncpy
strstr
memcpy
strchr
_except_handler3
malloc
??_V@YAXPAX@Z
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
strlen
srand
rand
memset
sprintf
_callnewh

kernel32

GetTickCount
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
Sleep

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE