368681ff05874c18558ddf835d51769a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

368681ff05874c18558ddf835d51769a
Size

64KB
MD5

368681ff05874c18558ddf835d51769a
SHA1

6ce4e12895ca42b612b7c3eb3937034d5bdfcdc2
SHA256

56aa63ab920efb426a7df4c8c2bb3c6276291f859826b5b74f301ee54f9c673f
SHA512

03d6048f6ca5f5a50db56652f131d41ac3acda008976e54c64c9573ed503b8a8149e3491dc1b3da586be1de294e4e85a2c1d5eb63c77fe6a38d31fe600905d6a
SSDEEP

1536:Z3QkgrtT9xtT8Pt1aJlVVDS+0IExSbBkhsVm0vy46fW7:Vm+PaVVDP0I7lkSVe/fA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
368681ff05874c18558ddf835d51769a

Files

368681ff05874c18558ddf835d51769a
.exe windows:4 windows x86 arch:x86

51fda4913bc8bc3c40f8875217da9641

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
VirtualUnlock
GetHandleInformation
GetUserDefaultLCID
BuildCommDCBAndTimeoutsW
GetLogicalDrives
ZombifyActCtx
SetDefaultCommConfigA
ConsoleMenuControl
IsDBCSLeadByteEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE