38ed4af0959fcac87b8c5a1eb4a082a886844c4a96e4e28f544d0b3c5f45a7e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38ed4af0959fcac87b8c5a1eb4a082a886844c4a96e4e28f544d0b3c5f45a7e9
Size

47KB
MD5

b67eb266fcb14b665d57591badb2db64
SHA1

056cdebe1221d257ce1a0fa8eef201a2142702fa
SHA256

38ed4af0959fcac87b8c5a1eb4a082a886844c4a96e4e28f544d0b3c5f45a7e9
SHA512

a8180da07e1815adc571d08e3c19e90fae910e9df5bcfff70add8b52f1726da631bcf8b2fa9b75bf1c4cfee6e6d74500995d2b54d022794b8e09520b41f34336
SSDEEP

768:ErzqmykDY3bpFVBUlSZZxG+4NWB4vVo1EThysik7NAvvy9agsDiJE:EqCY354S1+Wuo1yPikx+vIa3iq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ed4af0959fcac87b8c5a1eb4a082a886844c4a96e4e28f544d0b3c5f45a7e9

Files

38ed4af0959fcac87b8c5a1eb4a082a886844c4a96e4e28f544d0b3c5f45a7e9
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE