59ffbd1dfb652ce80b1a9540a9182506 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59ffbd1dfb652ce80b1a9540a9182506
Size

113KB
MD5

59ffbd1dfb652ce80b1a9540a9182506
SHA1

226d08f7c3eecf371f4157b2312ff6af880d4fc2
SHA256

dcc6ba5c7e9f965320df77fc6b0024812854c6a4a7163dbcf54f2bbbb832edda
SHA512

5d20c4c297c71f148ecd5109c424d25a1db0eba1ee893849c25c8e2b12440068b125333ff8377eb0dbb308f08b856b310159bdeefcdae0c5572b4a6c94eb7fa5
SSDEEP

1536:QVkTlW/5b87qQ3QgusiDOeFRsuu3T4KixX+Yt2KmJ/WhOykhstLuNTpG:QVkTlWh65xusJEsuu2FltB+qt6r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59ffbd1dfb652ce80b1a9540a9182506

Files

59ffbd1dfb652ce80b1a9540a9182506
.exe windows:4 windows x86 arch:x86

876eb33fd705826aaf048419413f4c68

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow
GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ