b264cc015cf1b370892a104938157a238b99c649804cb4e6d9f83afc65cf4542 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b264cc015cf1b370892a104938157a238b99c649804cb4e6d9f83afc65cf4542
Size

72KB
MD5

0186dd9d60f05c7bc311e255a650f532
SHA1

323379c7ac815be3453ba5654a5eba970c65a3a8
SHA256

b264cc015cf1b370892a104938157a238b99c649804cb4e6d9f83afc65cf4542
SHA512

968aa82bfbb81e337a9cc3b3aeee9afbb11a0dbd9d698b2d845e93fcfaf67067f02bf102ff72f191ea651ef25c784c0b305344d9574b40a0bdf8aa7b8c213447
SSDEEP

1536:xv/Gn6G8eQuC9PLb8okGNnZsq9xnIP3wlrFPCy5SfR+6S/fd7eZGWK5MxBX:x/hNpLzN9nIPWFPCKt/Jh5wd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b264cc015cf1b370892a104938157a238b99c649804cb4e6d9f83afc65cf4542

Files

b264cc015cf1b370892a104938157a238b99c649804cb4e6d9f83afc65cf4542
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE