676b072407fadcb2069408a6808edbaf7b2fe2a964cbcfd8ceb4162b3326046c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

676b072407fadcb2069408a6808edbaf7b2fe2a964cbcfd8ceb4162b3326046c
Size

74KB
MD5

5f5ea4558c952480b9288bdc31d10b7a
SHA1

23da0375aa3fe437cf7444b4153b2e76bea77fec
SHA256

676b072407fadcb2069408a6808edbaf7b2fe2a964cbcfd8ceb4162b3326046c
SHA512

7a548194ec6861de3977b706d195a8782b75dc55db485a10b415af9fc56ab63f76090067331210dbe952e8710a1e9b5eaa1456458ae9565737298235a2ccc0e1
SSDEEP

1536:10Qy//HYGZ75/51cnN/sTJMj+wiOAQYcnKfJYVJ:fy//d5/514N/QKjiOAjR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
676b072407fadcb2069408a6808edbaf7b2fe2a964cbcfd8ceb4162b3326046c

Files

676b072407fadcb2069408a6808edbaf7b2fe2a964cbcfd8ceb4162b3326046c
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE