d71a180cba36ae98f2f5f68f50a8326051488a7757358aaaf8cbc41ff74b6cc7 | Triage

Sharing

General

Target

d71a180cba36ae98f2f5f68f50a8326051488a7757358aaaf8cbc41ff74b6cc7
Size

1.2MB
MD5

ccdeb66280ac17e9138108fb140657c6
SHA1

42c1fe2ccbd03d1e6cd09c277082ea2139919ef1
SHA256

d71a180cba36ae98f2f5f68f50a8326051488a7757358aaaf8cbc41ff74b6cc7
SHA512

1325b394082d8b487e6a71e245dd876db4d5f5ae9c96e6d121327ffaf47cd05245b5d4be80e5ae6c993f1198c52a782a03d038d45414ad38b671e0e3116af985
SSDEEP

24576:lPSmv+7kjBMo8AsPYRB07KtDkYqQj4jCnsIAR4Nv:4mgkNMwZfyAYxBCngRKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
d71a180cba36ae98f2f5f68f50a8326051488a7757358aaaf8cbc41ff74b6cc7

Files

d71a180cba36ae98f2f5f68f50a8326051488a7757358aaaf8cbc41ff74b6cc7
.exe windows:4 windows x86 arch:x86

3a8897c84eb41f36b4bbabcc617408b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Exports

Exports

Loader

Sections

.data
Size: 407KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ