1e92bf9f7670b465101e31fe5e387a83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e92bf9f7670b465101e31fe5e387a83
Size

51KB
MD5

1e92bf9f7670b465101e31fe5e387a83
SHA1

35f21e5dbe78a4f09597b7fcfc3170dc2af25aa4
SHA256

7915ffc715d3ef636142a3bef47753db50ace8b1458fc2015857108b2f0a8322
SHA512

51b61f0552808a8b2782addb0dd23ade72e013833df53a1b3c3d2ab28fd3d98cf98788feb2f4101236c6b5015a9ce2edcd053ec704da33ac2ce2d74cf76f622f
SSDEEP

768:MEgR5LrersB6f4o5ZYTUZAspDozScoFEOgczeqqpH/hR6J:joLrersB6f/KUZWGcpOypHXC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e92bf9f7670b465101e31fe5e387a83

Files

1e92bf9f7670b465101e31fe5e387a83
.exe windows:5 windows x86 arch:x86

eced21bcf1dc958451c558e1fc3ed2fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
ExitThread
GetCurrentProcess
ExitProcess
FindAtomW
DeactivateActCtx
AddAtomW
GetCurrentThreadId
CopyFileA
Sleep
CreateMutexW
AllocConsole
SetUnhandledExceptionFilter
LeaveCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
CloseHandle
DeleteTimerQueue
ClearCommBreak
CreateFileW
GetCurrentProcessId
CancelIo
GetLastError
TerminateProcess
FatalExit
CancelTimerQueueTimer
WideCharToMultiByte
EnterCriticalSection
BeginUpdateResourceW

ws2_32

WSAStartup
WSACleanup
listen
bind
closesocket
GetAddrInfoW
connect
accept
send
socket

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE