398076ef5e493c30417061807b65beb0b1e3d818295b6b3e3aa08bb9846ef402 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

398076ef5e493c30417061807b65beb0b1e3d818295b6b3e3aa08bb9846ef402
Size

71KB
MD5

9cf6f03eaf944b0b70b8c223e352b7ad
SHA1

fb2b62d33a40173e023a7a3b1051797fad592e0c
SHA256

398076ef5e493c30417061807b65beb0b1e3d818295b6b3e3aa08bb9846ef402
SHA512

c0178b4ca8c72522e9a12ea3cc0b54fe80d1bf09fdd28c08a733ad91a3ab72bd92eac4f518f2f3b656405d61912bdd0573099e5b5cf4f237a89062606fec1c62
SSDEEP

1536:1JoSST4YsYpWvd5cvWU11m+b8gkIOUlzt9rerEU:n1S6jvCJ9QIrberv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
398076ef5e493c30417061807b65beb0b1e3d818295b6b3e3aa08bb9846ef402

Files

398076ef5e493c30417061807b65beb0b1e3d818295b6b3e3aa08bb9846ef402
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE