630dc68afccbc1ab36b4014721fcfb87 | Triage

Sharing

General

Target

630dc68afccbc1ab36b4014721fcfb87
Size

66KB
MD5

630dc68afccbc1ab36b4014721fcfb87
SHA1

bb4e0f4531599bcc07a8bdd7f0a5f1edd1f85a66
SHA256

35ee6a7e9750d674c220d3870b6674412f27c914315180c14c51982b8388e69a
SHA512

86b8c42c6c753792c784853b8ca497a72694120aa594cc0609f3ba6befa3491c67cbe591767ab6ea594a1a70d5964df10bd9abde4912177711cc69a25279d2d6
SSDEEP

1536:mlMh9gDI+hznHBRs3SQafBYsc27gIE5hiF2:EMh2hDbkSQc6stE5hI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
630dc68afccbc1ab36b4014721fcfb87

Files

630dc68afccbc1ab36b4014721fcfb87
.exe windows:4 windows x86 arch:x86

e698995a6bc14b7d3762f4380ddc7091

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumerateLocalComputerNamesA
SetFileAttributesW
ScrollConsoleScreenBufferW
WinExec
WriteConsoleInputVDMW
GetEnvironmentVariableA
RegisterConsoleIME
GlobalSize
QueryMemoryResourceNotification
ExtendVirtualBuffer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE