675a8dff01b3561c37a2b2475560bd33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

675a8dff01b3561c37a2b2475560bd33
Size

28KB
MD5

675a8dff01b3561c37a2b2475560bd33
SHA1

61544110c2ce2f3765d5f60234da9a62cb6f7261
SHA256

bc61ca8488d14615f9f48b14a54b6a4f64b03e3abd8201cad194c5812e4777f1
SHA512

0c31460623f2d0bc4f4f864c0317800d7c9522854403470bd881bedb41330c06b88c96fe84a101295e814f4affd270220f4cf65dbef3b364d178c74be059fb82
SSDEEP

384:kHs0G6H5j2q/pIvYgjZe7U5ztLNwGP9J2ldKTRYI7AnQXOTh60YN3ocYqywgtYLt:4GQDIleY2ldKTT8naO80wYqB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
675a8dff01b3561c37a2b2475560bd33

Files

675a8dff01b3561c37a2b2475560bd33
.exe windows:4 windows x86 arch:x86

8adb6e9c20e026fe53c6fad21500b877

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DelayLoadFailureHook
OpenThread
SetConsoleOutputCP
TryEnterCriticalSection
QueueUserWorkItem
GetExitCodeThread
SetConsolePalette
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

text
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ