4227d7c536a2c3dd37034f2607db10e6c8fdcbe4d438614df56c68d67f630bcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4227d7c536a2c3dd37034f2607db10e6c8fdcbe4d438614df56c68d67f630bcd
Size

6.6MB
MD5

9196d630f57cf61cbf411a97502b1467
SHA1

21ff7aa461d941041ea5461a62e0e6ce87bc0dd9
SHA256

4227d7c536a2c3dd37034f2607db10e6c8fdcbe4d438614df56c68d67f630bcd
SHA512

7c71e516b96489c3473b69b422df2065e57ac41ddeeb0fad824ab7ac8d004153c0d9f549f4b8a25371324b1c705159db4fe0c0cb70ac78aa01b7f8e9f8d6e8cf
SSDEEP

49152:NgGxgHwqWQSrkmDQx3POP6nDprgd6uh+u+lxcO0yZ5tvkXyZ4LuqzjPxFJ75Isu9:NDq9SrJsx3Phvgyl2UezL3ISOcsSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4227d7c536a2c3dd37034f2607db10e6c8fdcbe4d438614df56c68d67f630bcd

Files

4227d7c536a2c3dd37034f2607db10e6c8fdcbe4d438614df56c68d67f630bcd
.exe windows:4 windows x86 arch:x86

8c0cffaf5e868f09c9d79a41ec2f1347

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cdlli15

_SqlRunStartup@16

kernel32

GetModuleFileNameA
LocalFree
_lread
_llseek
_lclose
LocalAlloc
_lopen
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA
LoadStringA
MessageBoxA

msvcrt

__setusermatherr
_splitpath
memchr
_controlfp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Exports

Exports

GuptaProgId1

Sections

.text
Size: 4KB - Virtual size: 892B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 891B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ