207049f5aa0fde31dec40ff197e5dd91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

207049f5aa0fde31dec40ff197e5dd91
Size

436KB
MD5

207049f5aa0fde31dec40ff197e5dd91
SHA1

cf309292d2a93b69793c70d689cb33b03a0b18c2
SHA256

efe8d0302d4d48a16fbd87e1c9a452471c38c0361b52c342cb8acb34bfc157cc
SHA512

7102fd6f148c785115730de4fc3c8282dc543f039968e7832b7b4a4be8deb661a2d1cf7dc8bff89c6a7dd5a808c381bef6d6a414006e2b5d26a650cf2a5ac6c0
SSDEEP

6144:VAJFtSUUWbMaad7gqc4btlVIoZugYAhjI9FgUe0v7QoLYseYhzUNyMe8U3xVeksy:VATtSUwaG7gqPOoYgIDdM8MoaksqZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
207049f5aa0fde31dec40ff197e5dd91

Files

207049f5aa0fde31dec40ff197e5dd91
.exe windows:4 windows x86 arch:x86

bf020afffb0169705d5c7726e8345b67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetLastError
SetLastError
GetCurrentThreadId
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ