2297e72dfbf87881b246f1d9a4538c304ada80e5b1f8d00e2f726ee34859e86d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2297e72dfbf87881b246f1d9a4538c304ada80e5b1f8d00e2f726ee34859e86d
Size

3KB
MD5

d4b70565e76cbe1c948cb1304c05f188
SHA1

e4b54cf45f821f52f114b88ede064893a262f401
SHA256

2297e72dfbf87881b246f1d9a4538c304ada80e5b1f8d00e2f726ee34859e86d
SHA512

7a3e26f15c6a0d17372797351769ee45fb030cfd732e0cdb28496514508015c82262f4b61881be7b66c8812a9438134bf8ce119f41e3f344bb8c4f49c91f4169

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2297e72dfbf87881b246f1d9a4538c304ada80e5b1f8d00e2f726ee34859e86d

Files

2297e72dfbf87881b246f1d9a4538c304ada80e5b1f8d00e2f726ee34859e86d
.exe windows:4 windows x86 arch:x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ