6374475f1f083dbf9fb412a2eb5669e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6374475f1f083dbf9fb412a2eb5669e1
Size

2.8MB
MD5

6374475f1f083dbf9fb412a2eb5669e1
SHA1

8619b9121b55138cae2e62ed0ac4694b1857760a
SHA256

37c1a848737684b20507788cb6e6dd515b90a4fdc89bc5ebe95f8f814c3fc157
SHA512

78a58996e784579c62a2f5a5d6b2babd962721a5b5e99e600197cbb8d596ffbc10316f8d085c1a9a1560a9515d9a7542d9aba08e2654203f67c05ce31d2d8963
SSDEEP

49152:cxMMcvFoTcAFfoMbTdyvd3EL0yJMWSPv8:SSogifFTdTIyOW+v8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6374475f1f083dbf9fb412a2eb5669e1

Files

6374475f1f083dbf9fb412a2eb5669e1
.exe windows:4 windows x86 arch:x86

55441918e4175daa41864c86ab18ca79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileEx
DeleteTimerQueueEx
CreateTimerQueueTimer
UpdateResourceA
WriteFileEx
VirtualAlloc

user32

CreateDesktopA
ShowWindow

authz

AuthzInitializeContextFromAuthzContext

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 93KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ