f68aa1720aabdace5dc8e51e710fdf9a3ce9a1dbfc2374cd3091aa85ddb424aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f68aa1720aabdace5dc8e51e710fdf9a3ce9a1dbfc2374cd3091aa85ddb424aa
Size

36KB
MD5

02cee9e57613ca2138b99491a452f990
SHA1

d6cbf78bb01f15118f62872d5a9298c059a520a2
SHA256

f68aa1720aabdace5dc8e51e710fdf9a3ce9a1dbfc2374cd3091aa85ddb424aa
SHA512

c669a213702dfb12f6c53d05eafa1999a35620b667e3ab6499fdd25ad02998db97df505c7ea9cb0702e8e44187687afb15c0ae14e5362027fc8efd18fc64982d
SSDEEP

768:hrzeIgp9k05jbPb2W2MXCvvZFKmIAqGfTkYzdiZaQk53X8Rh:h2Igp6Sjf23nK/DGrkYZiZaQYH8z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f68aa1720aabdace5dc8e51e710fdf9a3ce9a1dbfc2374cd3091aa85ddb424aa

Files

f68aa1720aabdace5dc8e51e710fdf9a3ce9a1dbfc2374cd3091aa85ddb424aa
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE