579c2cbcec4c8da696c493b207fe276b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

579c2cbcec4c8da696c493b207fe276b
Size

63KB
MD5

579c2cbcec4c8da696c493b207fe276b
SHA1

e0f929cb7f8b0ddfeebd561ae17a0607310e769a
SHA256

26dbe3e677ce8f223c96fff6fe3fe168637efa69d9250ce20a892eb3a9a8ae73
SHA512

1bd78369ae5996c56c326b62fbba5ad26c0503c9999783f4b88b068784d6ead3346b5ffb724c2b2ec30481df1d0bd1a213edc0f6a1523666f65ec22fde9f40e5
SSDEEP

1536:i1LI8Wv+wIZlD7JHwJ+4HewX4AoRCCzZ2mnBDPp0Z:avWW37Z2LHewCRCKZp0Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
579c2cbcec4c8da696c493b207fe276b

Files

579c2cbcec4c8da696c493b207fe276b
.exe windows:4 windows x86 arch:x86

1d12b0213eeca8ea3c5a26a20b85d86a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
LocalSize
SetVolumeLabelW
GlobalAddAtomW
TerminateProcess
HeapFree
GetFileAttributesW
lstrlenA
UnregisterWait
LoadLibraryExW
GetFirmwareEnvironmentVariableW
GetConsoleAliasExesLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE