23956ba0bf923890043ac3ac5ade8d4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23956ba0bf923890043ac3ac5ade8d4c
Size

61KB
MD5

23956ba0bf923890043ac3ac5ade8d4c
SHA1

44c2f1aa93524b4f3832278e1b5edcaae8c31110
SHA256

8f973826ccf1fe50824742941c0e3aae45199554923e2d5ce666d024b38d915d
SHA512

4d074fa908ca842d9b6b156aa47d9ae12142ecf69353add8eb8be225273312d829cd7aa4b8bc1a920dd5e444966d0bd34b61dbc0e3d41abb24a42febdbb7324c
SSDEEP

1536:zjnMuqdz+KYCV/zvAfhCg9X4GN1/kc0Tj3LaX:HM1xhYCpvAfrp1/zkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23956ba0bf923890043ac3ac5ade8d4c

Files

23956ba0bf923890043ac3ac5ade8d4c
.exe windows:4 windows x86 arch:x86

9ca583938c587ffabca70e5f088f4098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
EnumUILanguagesW
GetDefaultCommConfigA
IsProcessorFeaturePresent
GetCurrentThreadId
ReadFileEx
FlushViewOfFile
ExitVDM
GetNamedPipeHandleStateW
CallNamedPipeA
CreateTimerQueue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE