679cf8f17d0b533830ecfe30950a3bc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

679cf8f17d0b533830ecfe30950a3bc9
Size

112KB
MD5

679cf8f17d0b533830ecfe30950a3bc9
SHA1

512c6eb5d7a120436d4efb16ff359445e9125cbd
SHA256

791783b7365c72ebe10a76a00db8d3e405ae2406b0e5185ee899215980afabae
SHA512

88dd758218cc1cfe4311051ad04f83639dd7046d297ae7058d3e88947ad57c83d156e32086de3680017ad4cc14e73c5a476d81f399a742d39272224cadc9c660
SSDEEP

1536:dVaLN7tei3Il8G+ZnanTQFGkxCuYjTVA/JD0eDTkaAOWmW1Wh:dV4N7tJ3Il8DnansF7YjpAAOPW1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679cf8f17d0b533830ecfe30950a3bc9

Files

679cf8f17d0b533830ecfe30950a3bc9
.exe windows:5 windows x86 arch:x86

97b3eeddee8ea020d26d5403e18feadc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
MulDiv
VirtualFree
GetCurrentThreadId
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ