00863ca31ab1bc2c5dd1ee9cfe817658 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00863ca31ab1bc2c5dd1ee9cfe817658
Size

7KB
MD5

00863ca31ab1bc2c5dd1ee9cfe817658
SHA1

50dca31d1142bf40a914e6872d432ba8104cc4f4
SHA256

74122eb958e52d2b28a9551fd594cffba6e343844512a564a7e8cd3fafd3c76e
SHA512

0a58f9a7300b2a45a7cfe2cb921794b5099af999c108662230967429828c2a68315a939eccc43d196005d0b646edb1e50e570d6050f4210f9deb2bb4a0730a25
SSDEEP

96:KgjtA9boWn7bt0M2kzBnoZUUQHxM0BQkwG4LQrZDxKJdzc4oqq6IM:KgjtASWn7ezmR3UQRqbLoXmdzc4oqq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00863ca31ab1bc2c5dd1ee9cfe817658

Files

00863ca31ab1bc2c5dd1ee9cfe817658
.exe windows:5 windows x86 arch:x86

d0f71efecbe88950c869eb7dc05c1291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetProcAddress
LoadLibraryA
lstrcatW
LocalFree
RtlUnwind
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

shell32

CommandLineToArgvW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ