31e98ba96dd692a62f94b9d6ba84a39181360f7626a8e088529c7181ad307bb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31e98ba96dd692a62f94b9d6ba84a39181360f7626a8e088529c7181ad307bb5
Size

71KB
MD5

6958647f5e61e3eeebbe23eaa4d0eb66
SHA1

0b75985a214b26a8ecc5e9c3bfbc5a04bbf79fa3
SHA256

31e98ba96dd692a62f94b9d6ba84a39181360f7626a8e088529c7181ad307bb5
SHA512

831eca5a95803c8559e187a5d4d0920fef56637a7283cb7f7cbb1967cf2fefe32039e2ae8d080d901a175ad41235fcee14ea8a57cd03cf5c02230cc7b0f7d166
SSDEEP

384:Mx6gRgkXJ46zdIA4aMiq2s9Allcffyq2eQ:Mx6Z8uxjaC2sgl4qB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31e98ba96dd692a62f94b9d6ba84a39181360f7626a8e088529c7181ad307bb5

Files

31e98ba96dd692a62f94b9d6ba84a39181360f7626a8e088529c7181ad307bb5
.exe windows:4 windows x86 arch:x86

512ed84d24632fda84935f5cd84afade

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
DeviceIoControl
Sleep
GetLastError
GetModuleHandleA
GetCommandLineA
CloseHandle

mfc42

ord825
ord800
ord2818
ord540
ord561
ord815
ord1575

msvcrt

exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_onexit
__dllonexit
??1type_info@@UAE@XZ
printf
_CxxThrowException
__CxxFrameHandler
_exit

msvcp60

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE