059ff3fdc6f4d137a9b569ad11c6c2ee | Triage

Sharing

General

Target

059ff3fdc6f4d137a9b569ad11c6c2ee
Size

248KB
MD5

059ff3fdc6f4d137a9b569ad11c6c2ee
SHA1

695422f982be541b40e73418d4e3c0e803215059
SHA256

ea5bb6a685f851e8b273c72906a39ed8c679f8270a7e43f15be9f25de68b443d
SHA512

bdf586b2a332e9a23415aaff2e7cf907f3cb9b823333d4755d04766159edc98679a6881b9ea350ccb11d1cf5fce7a25838534302221a17ef70a9f525e20eb48e
SSDEEP

6144:ZlK4ZnCsgZAk5rZA+LD8b/ngiuKfovP0TVfo:ZlKkI5rZtLD4LfoXr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
059ff3fdc6f4d137a9b569ad11c6c2ee

Files

059ff3fdc6f4d137a9b569ad11c6c2ee
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.scpack
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ