70ec328bb4cb88cc2d62251fc0a04678c0804bb40a1ffb8c96770c68b580baff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70ec328bb4cb88cc2d62251fc0a04678c0804bb40a1ffb8c96770c68b580baff
Size

73KB
MD5

f06fad8272c7dc6d113f01600526fa24
SHA1

82219d02389ac12f8f4748d1fc7adf370996598d
SHA256

70ec328bb4cb88cc2d62251fc0a04678c0804bb40a1ffb8c96770c68b580baff
SHA512

59130fc0e2fafe0c25208659355cd5cc91ee446fb7fd70ccf3a2fc760294efd35b246ac5afecd88f5a34407743c06760cf30f607d1151ea4e4d964f802137405
SSDEEP

1536:1/5eSd2CGilFul/vKVjb/uNf5Nf8kuHPvIRgHpfz:LDavcbUZ8trFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70ec328bb4cb88cc2d62251fc0a04678c0804bb40a1ffb8c96770c68b580baff

Files

70ec328bb4cb88cc2d62251fc0a04678c0804bb40a1ffb8c96770c68b580baff
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE