fcb256003b504e16ecde1c85cce503a4 | Triage

Sharing

General

Target

fcb256003b504e16ecde1c85cce503a4
Size

6.8MB
MD5

fcb256003b504e16ecde1c85cce503a4
SHA1

1f959e3de91aeb0cac7aa1b36211f354db67db7f
SHA256

9895123405ca6e2cd8ce9e39421d2df0303fd554b8735a523a84b3463bf90a0f
SHA512

c3990f597ade78fd3b17203a60ca1ee71df99af1c1a8822814c57c2ea79e9883e44069272526abcf305cd6b74c0c8dffd8a7a7f469739570293086e207596d45
SSDEEP

98304:SSogif0TdNTVeAIJJKwA8XzQoLYmVh7deYQwcO82ACqWccicTroitI:SSpiMrTVfIcAzzYmb7dXcz3C38QY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcb256003b504e16ecde1c85cce503a4

Files

fcb256003b504e16ecde1c85cce503a4
.exe windows:4 windows x86 arch:x86

55441918e4175daa41864c86ab18ca79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileEx
DeleteTimerQueueEx
CreateTimerQueueTimer
UpdateResourceA
WriteFileEx
VirtualAlloc

user32

CreateDesktopA
ShowWindow

authz

AuthzInitializeContextFromAuthzContext

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 93KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ