34a62f3dfa68660ab152a8e9ed442568330fc8ff7c0e7e6ea6bede65d3d80cd2 | Triage

Sharing

General

Target

34a62f3dfa68660ab152a8e9ed442568330fc8ff7c0e7e6ea6bede65d3d80cd2
Size

72KB
MD5

91698ca6057bbb4b01697f6bd9842f1a
SHA1

578dc1a67651ca68217242bf7ca4462c5e126a37
SHA256

34a62f3dfa68660ab152a8e9ed442568330fc8ff7c0e7e6ea6bede65d3d80cd2
SHA512

e7690c3e34cb667640a69d14103b7c6942634a649b2cd91dd165e4fe4d618a113dd5e6cd15c4ea3777106595b31fc04beac9f060137326b6072191cfb763f94d
SSDEEP

1536:xGrOhMC7Nb20g6HKF02z5HKgeBGmW9aSL:wrOhRvN2sGmtO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
34a62f3dfa68660ab152a8e9ed442568330fc8ff7c0e7e6ea6bede65d3d80cd2

Files

34a62f3dfa68660ab152a8e9ed442568330fc8ff7c0e7e6ea6bede65d3d80cd2
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE