051c93ab704f4c47c06babae6b28677b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

051c93ab704f4c47c06babae6b28677b
Size

68KB
MD5

051c93ab704f4c47c06babae6b28677b
SHA1

5229800df15819c9897857aa1987bda38853afb3
SHA256

39a9921cc4e716b875af21c9eb116e513f432fb1e887dec151b22b73da724c05
SHA512

5a7cec86173d2dfc0c4f470028e18bd662e76452568f78b48bf147980e314937cf4c05d70209873a505be6823264a4d2cffa7817199242b769f5cd73a9576e36
SSDEEP

1536:ZEJoNTT71lmCedBN86yVpJ3q7/zodWG5peCDzSwvZF8otV1B8H:ZE+V/mCe26yVX3q7/ztIJWwxvE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
051c93ab704f4c47c06babae6b28677b

Files

051c93ab704f4c47c06babae6b28677b
.exe windows:4 windows x86 arch:x86

bd3dad0200be7031c6f2511a2de475f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleHardwareState
HeapCompact
AreFileApisANSI
GetExitCodeThread
QueryDosDeviceA
CreateWaitableTimerA
MoveFileA
VerSetConditionMask
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.rc60
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rc61
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc62
Size: 45KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc63
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ