74e6de1209f153afa11297dcb58fb596 | Triage

Sharing

General

Target

74e6de1209f153afa11297dcb58fb596
Size

129KB
MD5

74e6de1209f153afa11297dcb58fb596
SHA1

e93b844c96810b14e32e87ead49d5e336b98b587
SHA256

12dadbf8cce6268b2f12ddf50e16b9fde37020b5d56d29e00eb2616802473f89
SHA512

ffd31393509e6f49da8a743f04e1d0b7d36b1528af2ad08ced1c6b332b9abaae39457f136caa947ec6b1ff3bb3800a8049c9f1e7f9b59e3322e0d7b0ef38e6a3
SSDEEP

3072:Jen/PECGn/dG3S+lVBgxU8f9MfXaLNGwwKxzhmvl1DVfua:gn/O/SVBIqXaLLwKBhmvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74e6de1209f153afa11297dcb58fb596

Files

74e6de1209f153afa11297dcb58fb596
.exe windows:4 windows x86 arch:x86

c9b79fc6f7698667ea95e323d46cb898

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualAlloc
LoadLibraryA
Sleep

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.const
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ