93ddecda827ed1c7c8952a644114583235d0b431db55ba81d8727530fca328f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93ddecda827ed1c7c8952a644114583235d0b431db55ba81d8727530fca328f0
Size

74KB
MD5

548cb316a6388e3db9718038fcbd7396
SHA1

0995fbb6d6c833b1c9202dc7bcb333107e6745f9
SHA256

93ddecda827ed1c7c8952a644114583235d0b431db55ba81d8727530fca328f0
SHA512

2efd7772311245d38abc236b2d320078a59832c0b6f7036ce8e7e22600d13ca7d7380888b1c0b00c79e20c9818b1b38d0fe66eb443e57c099128619e4f29dd76
SSDEEP

1536:1LLw62p7KTxU0IIBhVu2d7mN9msbqt36etdjZ:qgTJBq2d7e9ahH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93ddecda827ed1c7c8952a644114583235d0b431db55ba81d8727530fca328f0

Files

93ddecda827ed1c7c8952a644114583235d0b431db55ba81d8727530fca328f0
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE