320c5c499bc5ced06ad037b8aa644e50 | Triage

Sharing

General

Target

320c5c499bc5ced06ad037b8aa644e50
Size

60KB
MD5

320c5c499bc5ced06ad037b8aa644e50
SHA1

6e142e94cc8be9b0d2c5230028609a8094ae04d7
SHA256

3fbe13037f2f1bc3b054bd1409bca1cb000804fbf7e33e9fea2d060df25a6683
SHA512

80a7b97aefa9e65eb68bc5c9251603bf8568607ef8311af78a56fe3c632de0f527fc219d60d07362148a0a6bc4770ab3186c6ab31fc72106c24f3cd21ee44d18
SSDEEP

1536:pcRD7JVV8KyqzpaknyJbuFzLTk5tHElVrvD:mTztwVupLuHKr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
320c5c499bc5ced06ad037b8aa644e50

Files

320c5c499bc5ced06ad037b8aa644e50
.exe windows:4 windows x86 arch:x86

80b9f81959b8ba35ef9b825785debceb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameW
GlobalDeleteAtom
SetTapePosition
SetConsoleCommandHistoryMode
SetPriorityClass
IsProcessInJob
WaitNamedPipeA
DuplicateHandle
SetLocaleInfoW
HeapQueryInformation
SetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE