f44c985c6082f935381be92daab4967ba7009e564353061ecece58320d995a4dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f44c985c6082f935381be92daab4967ba7009e564353061ecece58320d995a4dN
Size

44KB
MD5

fa70ac4cc81bdf076b00276691e51db0
SHA1

f746c798cc6d6627e638a231d1d54ae846cef175
SHA256

f44c985c6082f935381be92daab4967ba7009e564353061ecece58320d995a4d
SHA512

d096d73531aced20bde20ee57bf330d5d6903b1912d4153a314703b86b42de8b18840b3810c97deecb17a0b9935848b7b20678553dc4889fac487fc13694a293
SSDEEP

768:rbg+CusXYkwt0tSkmfaQ1ire7jd8+LNhfXZaacUruB46:rJ+YLkmfa4rTJajUrn6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f44c985c6082f935381be92daab4967ba7009e564353061ecece58320d995a4dN

Files

f44c985c6082f935381be92daab4967ba7009e564353061ecece58320d995a4dN
.exe windows:4 windows x86 arch:x86

1c9449330c4f03b6524bacba296ae886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
_initterm
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
sprintf
strchr
strcat
strcpy
fopen
fprintf
fclose
__p__fmode

kernel32

GetStartupInfoA
GetModuleHandleA
WinExec
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
Sleep

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uscyjum
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE