638227cc693ccfcad99c6b2d6a9f79f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

638227cc693ccfcad99c6b2d6a9f79f0.exe
Size

119KB
MD5

638227cc693ccfcad99c6b2d6a9f79f0
SHA1

c2fc0e77944104b15ebe4f43f441ff23ef60cb94
SHA256

469cdf87c0022000c1005a1eccc941af8cffe8a9f358cc61fff881b90b144f8d
SHA512

4d5d417b3e592246187dff1b22c521abf5b81d0ab3676f1b98cbc01705f2ba368f4543b5bc6313a85d2c908465c621206d20ddff86fc8fade492d1e0da553487
SSDEEP

3072:2pEtU+BV3XdddB4Y6zXYs60m1vosQKuKAAl4c:2SaWV3XD4Y6zollQnMAASc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
638227cc693ccfcad99c6b2d6a9f79f0.exe

Files

638227cc693ccfcad99c6b2d6a9f79f0.exe
.exe windows:4 windows x86 arch:x86

b148db8057564b7709e7e213d388758a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesW
WerpNotifyUseStringResourceWorker
GetConsoleAliasExesW
GetEnvironmentStringsW
WaitCommEvent
CheckTokenMembershipEx
GetConsoleMode
SetConsoleScreenBufferInfoEx
EnumSystemCodePagesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE