3a41f0c62abae415f9b27d891536b05ef8e749266776a8087364f840a0a83564N | Triage

Sharing

General

Target

3a41f0c62abae415f9b27d891536b05ef8e749266776a8087364f840a0a83564N
Size

58KB
MD5

59b73c836659d7a8103ffe2c8b6e1510
SHA1

49ccb9e4465b6c411fc4db951ea8ae4989c975e9
SHA256

3a41f0c62abae415f9b27d891536b05ef8e749266776a8087364f840a0a83564
SHA512

db6f43c9656923d198c377a4c46acb0f5aa558137fd41184ae3e5f76eee16edea06a3d0fb5f57234efdcca1e2708fcabb32784dd54de2bd50e741f52f29be770
SSDEEP

768:MApQr0zvdFJI34iGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7iTu6z:MAaEJlosh7pWezEPJB+Oer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a41f0c62abae415f9b27d891536b05ef8e749266776a8087364f840a0a83564N

Files

3a41f0c62abae415f9b27d891536b05ef8e749266776a8087364f840a0a83564N
.exe windows:4 windows x86 arch:x86

7ecd8f76627cb5379a7c0b0c02b48c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
MoveFileW
GetSystemDirectoryW

shell32

ShellExecuteW

msvcrt

_wstat
_exit
exit
wcscmp
wcscat
fclose
memset
fread
fseek
_wfopen
fwrite
wcslen
wcscpy
wcsstr
__p__commode
wcsncpy
__p__fmode
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
_wcslwr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE