674bd01da4184f86363d9106c3e7b2fe | Triage

Sharing

General

Target

674bd01da4184f86363d9106c3e7b2fe
Size

56KB
MD5

674bd01da4184f86363d9106c3e7b2fe
SHA1

ae7c2910373f888a5e224b01c097fbdca5188e79
SHA256

3efeb1bf36f0ec7114870d96df655e14de84fb24582a909e39b65f91c746b76d
SHA512

f489b4cf884e3d2bf88d2b78b74e0cf25b200402cc091d70dc27877f91761cf2424b06ea7d3625f25e4015d9f50e62a7493e6ff8324360da35ad0e5392b06e35
SSDEEP

1536:m5UZs6OQfRND9d6nFJXetbLqtSGzur/qKL2zq0x5:myZsKYrXetqkZfLgx5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674bd01da4184f86363d9106c3e7b2fe

Files

674bd01da4184f86363d9106c3e7b2fe
.exe windows:4 windows x86 arch:x86

530a0199e285f53bf4ee0f894b45e33a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
MultiByteToWideChar
GetSystemTime
FoldStringA
MoveFileExA
SwitchToFiber
CreateMailslotW
FoldStringW
GetConsoleTitleA
VirtualLock
CreateFileMappingW
GetBinaryTypeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE