506a75bcaeef103c9e6775575fd662a1f95de2da1c5926601d00d9972999833f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

506a75bcaeef103c9e6775575fd662a1f95de2da1c5926601d00d9972999833f
Size

73KB
MD5

29cfdeb4cdb4c80f1d2dc7346543bba2
SHA1

bc458f4bd52549b8a131e94f89ba4e3f5b4b179e
SHA256

506a75bcaeef103c9e6775575fd662a1f95de2da1c5926601d00d9972999833f
SHA512

7aa6feca18166ba8f6c5ca9dbbff3e629bf5b197baa32ca42458a77193110772e58a5523a7b4c8d1fb5aeccd264db3f19aa12e9d5ce507698f9d96af4b63ab0d
SSDEEP

1536:1LLw62p7KTxU0IIBhVu2d7mN9msbqt36etdt0:qgTJBq2d7e9ahw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
506a75bcaeef103c9e6775575fd662a1f95de2da1c5926601d00d9972999833f

Files

506a75bcaeef103c9e6775575fd662a1f95de2da1c5926601d00d9972999833f
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE