58af0e28b620139f5f54ade1dbfc2174 | Triage

Sharing

General

Target

58af0e28b620139f5f54ade1dbfc2174
Size

156KB
MD5

58af0e28b620139f5f54ade1dbfc2174
SHA1

72d7d34828088b85c8e2934f7d596efbf5267a1a
SHA256

a2140b8c89838c04f343d18902e0a242d635b479102f2f9647260322ef09218a
SHA512

11b86c36b94a29aed1c7c07cc3c3d0b75eb493161802a8e760c7f1228d27393a60b5df70c169de80afcea6c1f9b06ad26039c779300f79e8705bc75a0684bf2b
SSDEEP

3072:lkZBAdQJFcmjsO6PvytaOEPd55AZJ93CEAinTVvVS3Fm7EmzfHy0rMHDup0:mZBAdcFc7/XytaRdbOxZbnaFm7EM60og

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58af0e28b620139f5f54ade1dbfc2174

Files

58af0e28b620139f5f54ade1dbfc2174
.exe windows:4 windows x86 arch:x86

6f7bae63eebb0fb074f94659c7e654b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalAlloc
LocalFree
VirtualProtect

user32

wsprintfA

Sections

?qn?@jik
Size: - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Tg"8oC/9
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

g4,AK!t:
Size: - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TZD+5(5=
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d7`fK0%Y
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

s*B/+EM8
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ