291593e93c526304137a4006915727b5 | Triage

Sharing

General

Target

291593e93c526304137a4006915727b5
Size

180KB
MD5

291593e93c526304137a4006915727b5
SHA1

701bce8e66d1a27d6e54b0d6817d400c4afd164f
SHA256

dbe64cd314f524d91442670bae4c06f2aaeb47de9d2f53196ca55cd0432ba160
SHA512

b63f9f0a609efd58abb46c18a384a7ab6cb268a1686718b8c36de5047c7baa4610604921249c4b6607882d007a35c75692347222cafd808b8bd1599818895b3a
SSDEEP

3072:YYi0QGC/3EEXPbyvYDubMVMRISqOifEHS4zwxmkb+ORz1sybsHVOE:DEG09XDy20RNqO4sSIwnJR5ZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291593e93c526304137a4006915727b5

Files

291593e93c526304137a4006915727b5
.exe windows:4 windows x86 arch:x86

65fa95d9c7063434ecc43b2ae850d63a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
GetFileTime
GetConsoleCursorMode
WaitForSingleObject
UpdateResourceA
FreeEnvironmentStringsA
CreateEventA
GetCommandLineA
GetCommMask
FreeConsole
ExitProcess
WriteConsoleOutputA
DeviceIoControl
DeviceIoControl
VirtualAlloc
_lcreat
GetDriveTypeA
EnumSystemLocalesA
GetConsoleInputExeNameA
SetConsoleOutputCP
ReplaceFileA
OpenEventA
WriteConsoleOutputCharacterA
GetComputerNameA
GetCommandLineA
PurgeComm
lstrlenA
InterlockedExchange

ws2_32

send

Sections

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 156KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ