337665d82d63300f9b51e05292ecf2dc | Triage

Sharing

General

Target

337665d82d63300f9b51e05292ecf2dc
Size

361KB
MD5

337665d82d63300f9b51e05292ecf2dc
SHA1

0df005caf0a1f95df6dd7578f43109cd974a6483
SHA256

068e1354c918f7247e2ea99ebcb5e85714c1315dfb33f09d32515049c91619dd
SHA512

1d2c640d0f722d4e35533a1b6f70f7d452f90104e95ef5b3d9d1d8affe246c1461352eff879df745f8276430fbb217b6b1185526302d1294151dd229543b8927
SSDEEP

6144:dikrU5ci848tCDsubZTkEUf5LVzMMu6uA79Z8uOaoS4V5NX/K:dikeBSIvbZAFxVzg6GzrNX/K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337665d82d63300f9b51e05292ecf2dc

Files

337665d82d63300f9b51e05292ecf2dc
.exe .ps1 windows:5 windows x86 arch:x86 polyglot

61e5f10389038a19fded01be1b489335

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

OpenSemaphoreA
CreateHardLinkA
GetProcAddress
GetModuleHandleA
GetFileInformationByHandle
AreFileApisANSI

cryptdll

MD5Init

Exports

Exports

?F342n@@YGXPAX@Z

Sections

3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.23_0
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r123c
Size: 512B - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ