1978815a628ccd29315cd35ff0607bf7c7574642573d9b5235c33ea6b2ae604c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1978815a628ccd29315cd35ff0607bf7c7574642573d9b5235c33ea6b2ae604c
Size

74KB
MD5

3872e093090a387bb484b766761c5447
SHA1

42950057caa8b30acccd8c70c2c4621fdf62eed1
SHA256

1978815a628ccd29315cd35ff0607bf7c7574642573d9b5235c33ea6b2ae604c
SHA512

9df5ff3306b5f8c9dce84575a1be7c3f734c08163938b792f35fd3ef6d476b57111f49349fcb26e323d7a0aaa3e2d43d31cb85965673f70e280b375ef7413c09
SSDEEP

1536:1cbNMI05ZPS2u30T8m99zfC5dhPIBUCwJLN9SZui1ZOmJvm:WMIqu30T8mf+P+UCwJB9Sh1ZOyO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1978815a628ccd29315cd35ff0607bf7c7574642573d9b5235c33ea6b2ae604c

Files

1978815a628ccd29315cd35ff0607bf7c7574642573d9b5235c33ea6b2ae604c
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE