962a736367ed5f4a4ae87b7c1a4b0c6d424dd825d377fff1a6f724ac9a4247ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

962a736367ed5f4a4ae87b7c1a4b0c6d424dd825d377fff1a6f724ac9a4247ea
Size

161KB
MD5

0c17b9d892ea1a0700721e7fdd29d189
SHA1

dafe53472b233784fb7013f898142f87b507875c
SHA256

962a736367ed5f4a4ae87b7c1a4b0c6d424dd825d377fff1a6f724ac9a4247ea
SHA512

ab6995dd442d88bf802c4a9774d0ebe160b3ed9748e2ff241acaf39d2ea014c836253a5db4c1ba66ece2764b71bee9dd2a3f053a46d4c8a88b8adbc41fbc592b
SSDEEP

3072:KFzpn6a6ah+AjfgrtTFsYHdN8j6CAsp0MsRhbMbs0KN0Xs6M79adNQZEL4rIt6IB:KFf+AjfgrtTFsYHdN8my0MsRFMbs05XP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
962a736367ed5f4a4ae87b7c1a4b0c6d424dd825d377fff1a6f724ac9a4247ea

Files

962a736367ed5f4a4ae87b7c1a4b0c6d424dd825d377fff1a6f724ac9a4247ea
.exe windows x64

33a1c474c1d0606c304b7e3044cbb761

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualAlloc
VirtualProtect
VirtualQuery
__C_specific_handler

msvcrt

__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ