d7cd78901a86fd349486e0e641452dc20f82efdaedaa61ad92652a4f1639ff4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7cd78901a86fd349486e0e641452dc20f82efdaedaa61ad92652a4f1639ff4d
Size

4KB
MD5

f856dd756a8cd530093ce68eb11b34e4
SHA1

695e02e7a4644375561606a2ecbd77602af17afd
SHA256

d7cd78901a86fd349486e0e641452dc20f82efdaedaa61ad92652a4f1639ff4d
SHA512

ae188538b51a542d9fa625cbc78512aeb75f16fa08fc3e38b0f48e710647c6da71dc89a310ce83af7c3c9b259e41cb0f685978e62aa0a7fd97ec952d01ca8e33
SSDEEP

24:etGShtc+fRBPWKMWKkRdoBMho6IAQviBTpXygWk0/flGbNw3lPEiZxF+H4n:6Hc+50AhdoBMho60gpi/AbNwVPK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7cd78901a86fd349486e0e641452dc20f82efdaedaa61ad92652a4f1639ff4d

Files

d7cd78901a86fd349486e0e641452dc20f82efdaedaa61ad92652a4f1639ff4d
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE