674d247c524eae34506a6c78af138c95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

674d247c524eae34506a6c78af138c95
Size

94KB
MD5

674d247c524eae34506a6c78af138c95
SHA1

74e9709c3093bd785da167b90b0ca3e93e3489ea
SHA256

26b4c71af0416ec5e2607ccbcb06434d08100f62b07521aa9c01a4fee4b0951a
SHA512

f5f2484a4491fdf23922c4cdbfd6c146e13c5775e82dad9b63cbf7820a30507cef638a1853b40cb1511b54cd62e0cf65b2bb45f26983757519edcbede4c84872
SSDEEP

1536:EJBWre0ll3ogThWydRY9RHgRtdSuEmlvgbT4m7c8YaEJwZK4/83ZoMOALF6SSf:EJBWr1ll41y72RHyiuRlva4m7hZEXtpo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674d247c524eae34506a6c78af138c95

Files

674d247c524eae34506a6c78af138c95
.exe windows:4 windows x86 arch:x86

783e0a019d7aa2df471343b077ae1e0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ScrollConsoleScreenBufferW
GetVolumeNameForVolumeMountPointA
WriteConsoleInputVDMW
SetThreadPriorityBoost
InterlockedIncrement
UTUnRegister
HeapUnlock
SetStdHandle
LZRead
FreeEnvironmentStringsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE