3901430509082614ccf14236e63682d0128c3a2496e88995342098c6a453aa4d | Triage

Sharing

General

Target

3901430509082614ccf14236e63682d0128c3a2496e88995342098c6a453aa4d
Size

24KB
MD5

9717cda1d7d78b5b12f783046c6df2a3
SHA1

cac7aea48ab3e6fe623fa1736a9492cc848bad52
SHA256

3901430509082614ccf14236e63682d0128c3a2496e88995342098c6a453aa4d
SHA512

451f47cf36adea832fc04db9269f0411f487b89e81ab7e55deb8c4b3138f6f139b9f365fceaddc3e27b2a6e77d660da93da38773f0acb68fd99bc074a2a4d4ea
SSDEEP

96:IPy5hK29feoq7uC/8A8uQeTWS6rS1gY8bkR31WqTw:I6h9fMu6QlSw3Mx1TTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3901430509082614ccf14236e63682d0128c3a2496e88995342098c6a453aa4d

Files

3901430509082614ccf14236e63682d0128c3a2496e88995342098c6a453aa4d
.exe windows:4 windows x86 arch:x86

b8bc3e77b6d54a038b55ac76bb6416e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateProcessW
GetCommandLineA
GetCommandLineW
GetModuleHandleA
GetModuleHandleW
GetStartupInfoA
GetStartupInfoW
GetSystemDirectoryW

ucrtbase

__p___argc
__p___argv
_configure_narrow_argv
_get_initial_narrow_environment
_initialize_narrow_environment
_set_app_type
exit

user32

LoadStringW
MessageBoxW

Sections

.text
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE