69914191a3f991387395709061009e72 | Triage

Sharing

General

Target

69914191a3f991387395709061009e72
Size

167KB
MD5

69914191a3f991387395709061009e72
SHA1

575a5633c219e0289a4cd2c6fd23690d74faff06
SHA256

2cdd56554a999152347286928e8b5aeaca4b0e9ed629661351dd00753a57310f
SHA512

c4efdcca19b44bb3fef0c32592aaad5f9ddc1cfa2bd82ef6c8bb6418fa3579e0510c1c1886cfa6614ed94d2001925fbdfffd699353fac890f47d429393547595
SSDEEP

3072:2RW8GOSXgIB3tFtMI1cMc/hbE0J3Bwqd4NEwpT25WlQyFL0Vz413OT:2c8WgW3tRCMYhA0J6q2tF2U+ymzV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69914191a3f991387395709061009e72

Files

69914191a3f991387395709061009e72
.exe windows:5 windows x86 arch:x86

85b6ca270d5c1cd02c0a7cdf38a578cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
VirtualAlloc
LoadLibraryA
LocalAlloc
VirtualProtect
LocalFree
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
VirtualFree
CreateThread
ExitProcess

user32

DestroyWindow
GetMessageA
LoadIconA
DefWindowProcA
SetWindowPos
ShowWindow
DispatchMessageA
RegisterClassA
CreateWindowExA

shell32

SHGetDiskFreeSpaceExA

comctl32

InitCommonControlsEx

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ