65510493710dd6097ad7748c4a5e09bf | Triage

Sharing

General

Target

65510493710dd6097ad7748c4a5e09bf
Size

63KB
MD5

65510493710dd6097ad7748c4a5e09bf
SHA1

5f973129444c68a8e4b829e559a495ea7d7678e4
SHA256

7f93ce1dd2fcd04bbc9ab3c03f24d53a1e47cb8805d2c03555498bed27014047
SHA512

d756a270be57323231dfca53064eb16c88b0d795b657eb9b625611b861bed63436d7d25498d831fed7f582bdb87469136986c6e68b62269963570b5526a5a6d0
SSDEEP

1536:eflZHin/BFjTvh1/7OHEQtxgpNmOrMCUuL:ilqBFjTpBO1t2LoCLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65510493710dd6097ad7748c4a5e09bf

Files

65510493710dd6097ad7748c4a5e09bf
.exe windows:4 windows x86 arch:x86

4dc0ea93cf961c52c112627085845749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetAtomNameA
IsSystemResumeAutomatic
GetTapeStatus
VirtualQueryEx
RtlFillMemory
OpenFile
CreateEventW
GetSystemTimeAdjustment
CreateProcessW
GetComputerNameA
GetVolumeNameForVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE