f93ef6416990fb0d56b3e63e7429508d | Triage

Sharing

General

Target

f93ef6416990fb0d56b3e63e7429508d
Size

40KB
MD5

f93ef6416990fb0d56b3e63e7429508d
SHA1

a965b77b985e3e04fdff42b3e6cd8eefba4a2680
SHA256

59f99802b29188207a3b60837cc1838ff2aaa2b6b3bc45824d99a06ec7657004
SHA512

51a2c211d42e194837a57716990114ab9cbc5ff52295fcf65abf9d5a84ccc659ffe595b94b4cbe5d26a3315a1c2e2559146a9317ccecd876bbef6205f12fabc0
SSDEEP

384:LuoYhnOyhutP/o/dBC8HYesuwwzi1KXeCGbFWtk:GOsududInuwmZcFWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f93ef6416990fb0d56b3e63e7429508d

Files

f93ef6416990fb0d56b3e63e7429508d
.exe windows:4 windows x86 arch:x86

6a529a4e2dc16dff75da6fe1c31e9338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
HeapAlloc
HeapReAlloc
GetProcessHeap
VirtualFree
FreeLibrary
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ