984f2ac4673b7d51baa911e1c18c280b4e5d324806a93c4a405e46db06d0fa3a | Triage

Sharing

General

Target

984f2ac4673b7d51baa911e1c18c280b4e5d324806a93c4a405e46db06d0fa3a
Size

21KB
MD5

7ef7c0a292b0de755e061cd6122f2d2e
SHA1

356b48ce074ae459a40709751071fb06e15a66cf
SHA256

984f2ac4673b7d51baa911e1c18c280b4e5d324806a93c4a405e46db06d0fa3a
SHA512

92861ea8fad8580fc6d21b1601dcc673a74152edda5ec2b6a16ebd7c42f8d73dcc51b95611e3e385ec00fe365684c033debd085ed85b7981fb4c9e2eaf1bd2c1
SSDEEP

192:TabGtBU271ugrjtqeXyiPRtNEMxzbNMLggt6FVVtAHjnCDHidgJdc:HB9ugrjgeXrRbmLobtAHjnCDCdgJd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
984f2ac4673b7d51baa911e1c18c280b4e5d324806a93c4a405e46db06d0fa3a

Files

984f2ac4673b7d51baa911e1c18c280b4e5d324806a93c4a405e46db06d0fa3a
.exe .vbs windows:4 windows x86 arch:x86 polyglot

79b79697cf6eab31398e51329807aa74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_getcwd
printf
fopen
strcpy
fputs
fclose
strrchr
memset
strcat
system
_sleep
strstr
strncpy
strlen
_controlfp
__set_app_type
__getmainargs
exit
_XcptFilter
_exit
_except_handler3

kernel32

GetVersionExA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE