0478871f5879c439f0566f93f04fd84b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0478871f5879c439f0566f93f04fd84b
Size

55KB
MD5

0478871f5879c439f0566f93f04fd84b
SHA1

57eb89a6ddd9a555326b0c9541cff67737c5ae38
SHA256

57b69eae6932ea79c6fa143650f6a1db6b5bc55c0ade449c02a916b83e1f0e12
SHA512

fa50a4585b9ed9921b9bdeb56af228cd635f26041ae2a4d9f758040465b836c97f623d2c9d4c2d0183fb08ed5e36051b0ee55e173cd4ef7676593b9d639acc76
SSDEEP

768:IcuQQ5OtSJRul+osToHu5lUWc5MWubCge76pHD04TH9MqHEUrogSFJN+7V5AGlbl:IhdRossHUfciNNe2pjTTFjJG+77n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0478871f5879c439f0566f93f04fd84b

Files

0478871f5879c439f0566f93f04fd84b
.exe windows:4 windows x86 arch:x86

0def542ceb903faf3859c54df51a082e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleInputExeNameW
GetEnvironmentStringsW
UpdateResourceA
WaitForDebugEvent
ReadConsoleInputExA
SetConsoleNumberOfCommandsA
OpenEventW
FindFirstFileW
OpenJobObjectW
VerifyVersionInfoW
NlsConvertIntegerToString
SetPriorityClass
GetSystemDefaultLCID
GetNamedPipeHandleStateA
InitAtomTable
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE