564ddd99f9c842094f23fd843e8a6e2bb30a8cecb182f4ac312e63996e57aaec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

564ddd99f9c842094f23fd843e8a6e2bb30a8cecb182f4ac312e63996e57aaec
Size

48KB
MD5

756896eda0429a30b92a9b4d4da1c9ae
SHA1

297ea9b820b752f2df8e88ff2357e9b95aa4d6d2
SHA256

564ddd99f9c842094f23fd843e8a6e2bb30a8cecb182f4ac312e63996e57aaec
SHA512

cccf8fa011138e8e742d1a90067771147b708aff344edd2047800782df6e8e0e6ed1cc4091162ea076c88223a9ae45eb42dcb9d9c9a15097b1bb75fd8a9f7e8c
SSDEEP

768:XakRhINMTZhg6fILcsUs8oWjHTOddrPKLEAzINce0N7hrhK:FINM3g0Iixjz0Kbe0N7hY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
564ddd99f9c842094f23fd843e8a6e2bb30a8cecb182f4ac312e63996e57aaec

Files

564ddd99f9c842094f23fd843e8a6e2bb30a8cecb182f4ac312e63996e57aaec
.exe windows:4 windows x64 arch:x64

37c76b45cbd9675fc7981511dd221070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetErrorMode
GetStdHandle
ExitProcess
GetCommandLineW
GetConsoleScreenBufferInfo
WriteFile
WriteConsoleW
SetConsoleTextAttribute
OutputDebugStringW
GetConsoleMode
GetFileSize
CloseHandle
GetFileTime
GetFileAttributesW
GetFileInformationByHandle
CreateFileW
FindClose
GetLastError
GetVersion
SetLastError
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
DeviceIoControl
SetFilePointer
ReadFile
GetCurrentThread

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ