b309fd1467dbdfef665ea33afd262aabf980a637c7aa692eea0cf51a1bf9482a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b309fd1467dbdfef665ea33afd262aabf980a637c7aa692eea0cf51a1bf9482a
Size

23KB
MD5

cc277e6a1d2696d8af521e2abd317d78
SHA1

68127ad3d4bbac68c235eca006771b7792ef4d65
SHA256

b309fd1467dbdfef665ea33afd262aabf980a637c7aa692eea0cf51a1bf9482a
SHA512

7f26c74629d15e709887ac5d75cd021b6cce27a3429230ccb86471533756cea319b0ad9bcd8b1b4dec1a60b2225aa84634158935b4ec5d993bff1528383b24e0
SSDEEP

384:ErzP/kysDMEAsy/9z6xcU2uTTgJwSK5YBV26Bcjze+wW5ton0LSoE6SP/m:Erz8rDHSR6Wl2gZKizyzeS5t6I/q/m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b309fd1467dbdfef665ea33afd262aabf980a637c7aa692eea0cf51a1bf9482a

Files

b309fd1467dbdfef665ea33afd262aabf980a637c7aa692eea0cf51a1bf9482a
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE