167310135ec3b1087612bfb18358671069b7bd5634944d10587d917f2bfdfc9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

167310135ec3b1087612bfb18358671069b7bd5634944d10587d917f2bfdfc9b
Size

74KB
MD5

4f0693c6d7152b549935b20abbf46b95
SHA1

a2eecdee7328f1f06186c61bde5f7e9614082707
SHA256

167310135ec3b1087612bfb18358671069b7bd5634944d10587d917f2bfdfc9b
SHA512

d71234cb5bd990be809693a56a3b07e9f30a639524eaaae624960ce75eac3880bf72be2ece1e1d8826a45ed75bb0b50f817c37b85f84351cdca9fa630daa7b73
SSDEEP

1536:1sKaiQa/Et2RIs4BhacEYs27zzzWoPLBOgjYTb:qKNK2RIsqzls27zzzWssOYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
167310135ec3b1087612bfb18358671069b7bd5634944d10587d917f2bfdfc9b

Files

167310135ec3b1087612bfb18358671069b7bd5634944d10587d917f2bfdfc9b
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE