59b1925c32cf25e28293931dcb052ee7c64b964290e95009dd65b016ea4207b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59b1925c32cf25e28293931dcb052ee7c64b964290e95009dd65b016ea4207b9
Size

2.9MB
MD5

5b3cbbebfa6e9e1d793b29cce5231af9
SHA1

dc069f3909aa3bc35684e2b7cca1a633c5f3176f
SHA256

59b1925c32cf25e28293931dcb052ee7c64b964290e95009dd65b016ea4207b9
SHA512

22f15677c909685799fb8e96d023403b0fe480ad56050055e0fc57b650d63fea9605a1141c8bc3f18335bde835a123179f82275a608b9179ba86904bf0565f2a
SSDEEP

49152:uQ+nTQqQl53imwNnYbSPNvXkhOFshkM4uPMgAJA1InS6zveCwpQWySn:FV3iPYb00hisYTn2Fp1n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59b1925c32cf25e28293931dcb052ee7c64b964290e95009dd65b016ea4207b9

Files

59b1925c32cf25e28293931dcb052ee7c64b964290e95009dd65b016ea4207b9
.exe windows x64

b6af214d68718171949ae0a4fd531dc1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

InitializeCriticalSectionEx

user32

GetUserObjectInformationW

advapi32

RegOpenKeyExA

netapi32

Netbios

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ