d35e67990c0a69b118a3e6747d0f86a83b47590152a21b5d3bbbb86651984178 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d35e67990c0a69b118a3e6747d0f86a83b47590152a21b5d3bbbb86651984178
Size

47KB
MD5

998d10f83c2538beed125ae2a45e74eb
SHA1

2bff8704e20df26656ff0b58c89a0ac3ac73bae0
SHA256

d35e67990c0a69b118a3e6747d0f86a83b47590152a21b5d3bbbb86651984178
SHA512

3be7ec6e966a851d58e8fc10d6bb82d3d79232fcbfcb198d4d8db46936efa31182a312d1e44ee054f01e7570ca9389bbe27fb459afd789442586e916c6243d76
SSDEEP

768:Erzq2iP0n1gMLsq2DwXfisMeNgBMi3Hm/9FLxLQdKhrsDmYyTYuB+:EKMLZXfXfG5m/9RxL+isY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d35e67990c0a69b118a3e6747d0f86a83b47590152a21b5d3bbbb86651984178

Files

d35e67990c0a69b118a3e6747d0f86a83b47590152a21b5d3bbbb86651984178
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE