97c12a8f77c0cc2453b6cdc4f467a68459600c65dd574f2693cc6d2c61ddda2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97c12a8f77c0cc2453b6cdc4f467a68459600c65dd574f2693cc6d2c61ddda2b
Size

184KB
MD5

cd70656249506efd4d945fda426762de
SHA1

599e7192f53a467f92e9e136285ba11ee10a6a6f
SHA256

97c12a8f77c0cc2453b6cdc4f467a68459600c65dd574f2693cc6d2c61ddda2b
SHA512

8103ff7076687946f2a01fadc69d30049794d0daa5cb2846dc2667ae70e4c6a9b058d026f8a3ad547c7bf678a70e1eb7af4fb095b23a613c0c13ee2df90a3bf1
SSDEEP

3072:kp1pGoTyE0t9nGY30qdMzXlJpvLYK9PInNHiQbKufY9z/mXRqJCerMe3IRauKamY:U1TyE0t9nrd8XlHvUK9QNHi88bJCeoeM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97c12a8f77c0cc2453b6cdc4f467a68459600c65dd574f2693cc6d2c61ddda2b

Files

97c12a8f77c0cc2453b6cdc4f467a68459600c65dd574f2693cc6d2c61ddda2b
.exe windows:1 windows x86 arch:x86

faf6966176d620fef39250aa95db75fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
GetCommandLineA
GetDriveTypeA
GetTickCount
MapViewOfFile
SetErrorMode
Sleep
UnmapViewOfFile
VirtualAlloc

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE