58a18f83cc896af5ddeb499d36aeecb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58a18f83cc896af5ddeb499d36aeecb8
Size

180KB
MD5

58a18f83cc896af5ddeb499d36aeecb8
SHA1

a2c27018f50826290bf5dd428e4581b066e4d4a0
SHA256

3ffdfa2dc6a245357e7651a0a43a66dbf45d0ee1b4c5e17966a293e7845d4e75
SHA512

6eae04625e42691bd896937972b0be133a26088e8d9aaadb14ab3d54f2714138d0d1044cff9f42c818f1ee29cc89d87815d5304200fa7cee2904f957997c0f20
SSDEEP

3072:GDvOrtGhZdt0h4NERYl+Y1D75IgUzzkYWz8CvJCKm7G7oRRmoe1q6eZFZsQp:AvOA04E6Phd3UzzkXvvJG7GERooe+sQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58a18f83cc896af5ddeb499d36aeecb8

Files

58a18f83cc896af5ddeb499d36aeecb8
.exe windows:5 windows x86 arch:x86

b75de7922ef37d081d83860694252eed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentProcess
GetModuleHandleW
GetTickCount
GetCommandLineA
GetProcessTimes
Sleep
GetFileAttributesA
lstrcatA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
lstrcpyA
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA

user32

wvsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.heb
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE