32dd059b2183d9971d273dfc93a2e980_console[.]exe | Triage

Sharing

General

Target

32dd059b2183d9971d273dfc93a2e980_console.exe
Size

27KB
MD5

32dd059b2183d9971d273dfc93a2e980
SHA1

6f721d6778e058b366f8ee88948b26b1530d0dc0
SHA256

ae7ded92d11e90a5e127f7d1230a7bcfd93bb8d05b10fb51a69bb20b86425de4
SHA512

a7dbf385d106b1706b816551a4aaccd46774f3014144935d20ed4bcd60000b164c3183d892b952675c539940526a016bd13492314c14a0ff0aaf585cde192c65
SSDEEP

384:XnkEpsqDFr7Cr1nz+nl4IS8+wm1vudIE/UhzU1JXOa2CZaSjL+GS1IFB8X4bD:0EpV44nl4IS2mQ/cCnLSQBwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32dd059b2183d9971d273dfc93a2e980_console.exe

Files

32dd059b2183d9971d273dfc93a2e980_console.exe
.exe windows:4 windows x86

341c841bb14989008666b81304e02351

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
atexit
calloc
clock
exit
fclose
fopen
fprintf
fread
free
ftell
fwrite
__p__environ
memset
pow
printf
putc
puts
realloc
signal
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE