c232fa07acba02efc9810515c9d8c4cc507dbe9f0dc676c18cdbb9aee2515eac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c232fa07acba02efc9810515c9d8c4cc507dbe9f0dc676c18cdbb9aee2515eac
Size

504KB
MD5

76a676cfe4ae5110cbc2fa194d6f2d80
SHA1

e3645d18cf4e8309dfc8efc419205d63777cd8be
SHA256

c232fa07acba02efc9810515c9d8c4cc507dbe9f0dc676c18cdbb9aee2515eac
SHA512

865a872169e3972cae89fd89e5832bd5e6d79bcb72069e22c9fbf82f9a7e819aa0cf65f571bd7cda68e73fc82a1293d10ef04a12a6b88f4440e4b0be8f24baf8
SSDEEP

12288:DIiF9HWLs4mcGT2p4emBaPRtyMocxYInzjZXgslh:39Ms4mcGTE9pPRtc0jZ5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c232fa07acba02efc9810515c9d8c4cc507dbe9f0dc676c18cdbb9aee2515eac

Files

c232fa07acba02efc9810515c9d8c4cc507dbe9f0dc676c18cdbb9aee2515eac
.exe windows x64

cc92ac00a8c5884a00efcf92f4c7fbdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

gdi32

LPtoDP

wintrust

WinVerifyTrust

Sections

.MPRESS1
Size: 372KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE