0615a251144f8b0f71bc71d5547482cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0615a251144f8b0f71bc71d5547482cb
Size

1.3MB
MD5

0615a251144f8b0f71bc71d5547482cb
SHA1

ecf7508a6f59dcdc948be7f9a490dbd755efeb31
SHA256

e2f277074071fe7e03961dfcf21f19b4dde54d3aa9673274ec2bcb6cf9831077
SHA512

0a324d30ada18dce082464ab87055e53694d0ea3b0ebe95e48a82600e9867c429c2a98119c18be84185516a06153775190f8cf558d4d66d978650e6cbfbd4fa0
SSDEEP

24576:tMiiw+Xbttthiiw+Xbtttq+kdc8dnMmphu/nAQXJmbFM5Hi:eiiw+Xbttthiiw+XbtttyfdMmbusmHi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0615a251144f8b0f71bc71d5547482cb

Files

0615a251144f8b0f71bc71d5547482cb
.exe windows:4 windows x86 arch:x86

aeb7b06db1b5000cbfe375a9b1285a85

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
TerminateProcess
LoadLibraryW
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
VirtualFree
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCurrentProcess
GetLastError
SetConsoleCtrlHandler
WriteFile
GetStdHandle
ReadFile
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
CloseHandle
CreateFileW
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 742KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ