e1360297705afd2a2b0fec03f488526c | Triage

Sharing

General

Target

e1360297705afd2a2b0fec03f488526c
Size

40KB
MD5

e1360297705afd2a2b0fec03f488526c
SHA1

2272b216978bd11d36c1c3084f8d6d85fdda656a
SHA256

b1866748776a372838ca8aa715aa64d5180173cbe4b7ebf4a5e82d9b543d4bf6
SHA512

0bf41d5006f0c14478d71ef2a81aa6a893314103fd084ac77dbaedb2dd0598e928a4a7cf02031132e1a454d5a376565203722a5feb63d679269902c9e8b5a2f2
SSDEEP

768:VY/n/ICPB1uyxrfce1N6TLanKMTTL8yaIwpu+iGlp479UOyM29AvGxxCrJ:q///7NgaAvpu+bZM2kexyJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1360297705afd2a2b0fec03f488526c

Files

e1360297705afd2a2b0fec03f488526c
.exe windows:4 windows x86 arch:x86

8f493f7b82d3854f60073e3877d2772e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetShortPathNameA
DeleteFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

free
calloc
fclose
fwrite
fopen
malloc
strcmp
strcat
memcpy
strcpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strlen
_exit

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ