df470a8b0d1f73204a240a85355d6611237f9296ca6aeb9de0cb3712ea64c932 | Triage

Sharing

General

Target

df470a8b0d1f73204a240a85355d6611237f9296ca6aeb9de0cb3712ea64c932
Size

73KB
MD5

ac6a27b6e977561384e36bb9829e3407
SHA1

c360682bbc7d099f44902f474c7d73fcf9f32d2d
SHA256

df470a8b0d1f73204a240a85355d6611237f9296ca6aeb9de0cb3712ea64c932
SHA512

380411202fc65a937d546fec9a2749af956055f8127880e8b5ee02a662e71d416f581f551adbdce78a21056f819cfcbd7bb3ea005165fe3a8c0374e66ef663ae
SSDEEP

1536:1y9REHv+R1IFVTvutLebJI6n9IRw4VXFLM1NJ:YO27SV4s5xMabJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df470a8b0d1f73204a240a85355d6611237f9296ca6aeb9de0cb3712ea64c932

Files

df470a8b0d1f73204a240a85355d6611237f9296ca6aeb9de0cb3712ea64c932
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE