032bc628c9cad4d4aa271ee2a63a821b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

032bc628c9cad4d4aa271ee2a63a821b
Size

94KB
MD5

032bc628c9cad4d4aa271ee2a63a821b
SHA1

d264970712f334560d251a782be791626c221911
SHA256

43f80f10223f8a1f5602e0d313d73f6917f24f457389263a70098ecf3f278119
SHA512

5c299229305d23ee41b4d4a89f2d3d3cda7c5674aecd221287560e7c9f08a7fe6998115fc2bdfe5f17137d88cc6e57675f630af38fabebc7d58b293a2321c365
SSDEEP

1536:76ZUywdtn7DLLJa2HSAPw4/kNstc8YaEJwZK4/83ZoMOALF6SSf:7sOHZhykY+thZEXtpxLF6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
032bc628c9cad4d4aa271ee2a63a821b

Files

032bc628c9cad4d4aa271ee2a63a821b
.exe windows:4 windows x86 arch:x86

1d22fc77d803208a92f7db15c6912a61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetDllDirectoryW
WaitForSingleObjectEx
SystemTimeToFileTime
DuplicateConsoleHandle
CreateSemaphoreW
UnregisterWaitEx
EnumResourceNamesW
GetCPFileNameFromRegistry
GlobalUnfix
SetEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE