cf39a776916c0a8a91bf80d25a43ba62300dfd2131a2a3558cbde172cfe85def | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf39a776916c0a8a91bf80d25a43ba62300dfd2131a2a3558cbde172cfe85def
Size

72KB
MD5

8b20c4f10f94ee118c342a71639dc138
SHA1

be5e3cd8dd3a9f31daf8a70d3b91c7c2b8775851
SHA256

cf39a776916c0a8a91bf80d25a43ba62300dfd2131a2a3558cbde172cfe85def
SHA512

80bf3ea8f23f7857df7aa3e108ae616e02aee5232f3a0c127f921041019f235c1fe3094ddc7e7f3688809e7cf18787f4ba7f32132e35cd891f65b42ee51a9823
SSDEEP

768:x/naIuoI9Igg93neKR3j0zOkbAQ9w9tCn6bch2Hv04F6G6UWEnvyciQvoyHvhAHk:xFIolkbAz986b784UUWcaciQvoyHveRi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf39a776916c0a8a91bf80d25a43ba62300dfd2131a2a3558cbde172cfe85def

Files

cf39a776916c0a8a91bf80d25a43ba62300dfd2131a2a3558cbde172cfe85def
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE