61802d5c931b4818af86e6fec63487a0 | Triage

Sharing

General

Target

61802d5c931b4818af86e6fec63487a0
Size

66KB
MD5

61802d5c931b4818af86e6fec63487a0
SHA1

981ad23a63f4f9b6362d2c531a47f8f13310368e
SHA256

25ad36543981e5a71ec55d784d88d5b9f605d317e21342dfba690556405a2a2f
SHA512

03738e66251edc04acec1b715e824f43a8b62bb687dcc3f10b4137b9363a1fb5041ae51749d8ac32150d801c2d440b175308857f1a5feb03d1e75855e49c0ba3
SSDEEP

1536:5uujL0ZkvwDyKRXDJ1BAzLVdz0dMRwi8M1zWALSdaoAQ:51L0ZkvikIdH7M1Soi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61802d5c931b4818af86e6fec63487a0

Files

61802d5c931b4818af86e6fec63487a0
.exe windows:4 windows x86 arch:x86

0265673112debba27dbb10ba2fd7ddda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaNodeProcessorMask
GetLastError
OutputDebugStringA
FreeConsole
WaitForSingleObject
GetVersionExA
lstrcpy
SetCommConfig
lstrlenW
LZOpenFileA
GetUserDefaultUILanguage
GetProfileStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE