200fe283f064c6dd2f5272559cba0b5b | Triage

Sharing

General

Target

200fe283f064c6dd2f5272559cba0b5b
Size

15KB
MD5

200fe283f064c6dd2f5272559cba0b5b
SHA1

9bd7d4f241c8ee36e0fb75e16318a747aad80b54
SHA256

bd2c32d9fef7d64198f61efa1adfc6deb0c354299c36476985249e3e0c70f9c9
SHA512

3706e69cfb704045faf49982664512d6c9657d7af604aaef5b4ecdcac48056babb77f6a798618a9f109a630a8ad976bfa828b9d8d97fbf97c80e213b57f75fbe
SSDEEP

384:Y9wCRxhpdXziqMa6Z3AS7AvfOn29zmBlA3yU1WCJL:YykPBy3AS7AvWuAU1WiL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
200fe283f064c6dd2f5272559cba0b5b

Files

200fe283f064c6dd2f5272559cba0b5b
.exe windows:4 windows x86 arch:x86

0c208c8ccc4e2baa6580492c82616cea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
InterlockedExchangeAdd
InterlockedIncrement
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetACP
InterlockedDecrement
HeapAlloc
GetProcessHeap
GetCurrentThread
GetCurrentProcess
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ