700c526160551bef4576118e9ecdd939fdaee2e3d9c59eb0db33fe4ffade1db6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

700c526160551bef4576118e9ecdd939fdaee2e3d9c59eb0db33fe4ffade1db6
Size

73KB
MD5

3054f5d04ed789bc14a83eda69bb0bce
SHA1

a655480550316dc9640e2a57568bb68216d929aa
SHA256

700c526160551bef4576118e9ecdd939fdaee2e3d9c59eb0db33fe4ffade1db6
SHA512

b9671906a4e8e84b8dfb432676a49718f7a591121887d0b44c87ef6bb0a2302df7049eb5554761c0bb49f2d077667bf9e2d6182108537f407eff37b9fe5a95ba
SSDEEP

1536:1fGw9y+pAF9LNUK/gYr2yTJfY1Nvwn2TerK/bFm9xnos5O6uA4mA:knDUK/g51Non2ioFm02O6uA/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
700c526160551bef4576118e9ecdd939fdaee2e3d9c59eb0db33fe4ffade1db6

Files

700c526160551bef4576118e9ecdd939fdaee2e3d9c59eb0db33fe4ffade1db6
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE