90232058bff6f22129e16619fe1a3d09 | Triage

Sharing

General

Target

90232058bff6f22129e16619fe1a3d09
Size

1.0MB
MD5

90232058bff6f22129e16619fe1a3d09
SHA1

002f45c4d017390630076f78cbbc08f4d7fb3ea0
SHA256

3f2f2dd72238917ef538e81402c8f82533cfc274186621d25176d14685d11f25
SHA512

a975c509bcef3ecbc50278eb0a47f4a7e699f36f99eb48f2d0b40b2d51d140eaf987ebc45fde19bae21e9ba892dbb4a9cec7f3de768d9e614635dbc315248066
SSDEEP

12288:27LPpR4zA1gyEDe07i0/XzLR6FuUq/Wdp:+7Eza+Li

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90232058bff6f22129e16619fe1a3d09

Files

90232058bff6f22129e16619fe1a3d09
.exe windows x64

a9be11e0ea57c6d6a086cd5d9411dbe7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
CreateEventW
ExitThread
HeapAlloc
HeapFree
GetProcessHeap
Sleep
GetModuleHandleW
lstrlenW

user32

MsgWaitForMultipleObjects

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ