058ce70938b9d4f3d600362e3be3acfc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

058ce70938b9d4f3d600362e3be3acfc
Size

327KB
MD5

058ce70938b9d4f3d600362e3be3acfc
SHA1

e81ea824be4d5c8e04aaae60719475f8c679c216
SHA256

47f7199a2f4d3b5ba6e8b666e217502a557b533dcafba6c2b42c3235fc565e98
SHA512

21882b81f003bd91a93191bf89f360655a152778b14ae7af54f1cff6afa9712fcc3bf9a38a4f08b6b6078da47ca00fa8d310b0c460c84ae847defd2d263c0d72
SSDEEP

6144:xetIaTmi+lZ0/qWKGl/IVFG+yKYw7oEKSKUWXXhnOHixQ2ageISQ:y/d+La47+KYbHxXXh78geISQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
058ce70938b9d4f3d600362e3be3acfc

Files

058ce70938b9d4f3d600362e3be3acfc
.exe windows:4 windows x86 arch:x86

64df8c6719360437f24ae66c82aa3cec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
FindClose
FindFirstFileA
GetSystemDirectoryA
SetFileTime
GetFileTime
GetModuleFileNameA
GetCommandLineA
CreateFileA
Process32First
CreateToolhelp32Snapshot
Sleep
SetLocalTime
GetLocalTime
TerminateProcess
OpenProcess
GetCurrentProcess
ExitProcess
WinExec
DeleteFileA
GetWindowsDirectoryA
WriteFile
CloseHandle
Process32Next
FreeResource

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ