(x32[.]x64bit[.])_technician_13[.]5-patch[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

(x32.x64bit.)_technician_13.5-patch.exe
Size

826KB
MD5

45b2195e337a5e964da5aa1e1db97e0e
SHA1

4a7b5d5b18daf75cdf0ec2bbf725d48cd237ce8b
SHA256

40c43374884c10691051207a1b7b7fe12d0d6b8031752ba146d442255b88b151
SHA512

0668e8cbd65dad662857a21b339dfe1e08d7d9d6733f91b2187e983a01c559c2ab5a942ac595bc6cddf9f608c4052a2cd03a7413a8099ffd2ce7f80eb813602d
SSDEEP

24576:xD1SueC3vrBeedZyDbsIdjOQBiClYUnpUEjso+2+S1C:xDAn2vrBesEDbOHEYUp/1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
(x32.x64bit.)_technician_13.5-patch.exe

Files

(x32.x64bit.)_technician_13.5-patch.exe
.exe windows:5 windows x86 arch:x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 823KB - Virtual size: 823KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ