093f549775b123c758b0b630439f0e27 | Triage

Sharing

General

Target

093f549775b123c758b0b630439f0e27
Size

168KB
MD5

093f549775b123c758b0b630439f0e27
SHA1

24ad93fb14503f86f59fd3258bac7f6d9848ac15
SHA256

58d74b0b9070e842c61e397e59e6b59181b9e0c8f2a27ca614b1b9ddedcab0fd
SHA512

ee672a6e074ff5116a03e60cb0e8043a3e73cdad2daf83e386154c2d35bb74c424403bbc728362f405318ee70cf9aef50e912710449c3a08dd2dffd302497c35
SSDEEP

3072:nLC2sZyu0oHXdUdvtFeEhIrufU3tqgBma7b9Tfr/DuYUH:LC2sz0IXdKvGEhKg5aftziY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
093f549775b123c758b0b630439f0e27

Files

093f549775b123c758b0b630439f0e27
.exe windows:4 windows x86 arch:x86

35b8fe85f3948d89401e47481c9f95d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
ReadFileEx
LocalAlloc
Process32First
UnregisterWaitEx
CopyFileExW
CreateWaitableTimerA
UTUnRegister
UnregisterWaitEx
GetProcessShutdownParameters
RegisterConsoleOS2
GetFileInformationByHandle
RegisterWaitForSingleObjectEx
GetProcessAffinityMask
WriteProfileSectionA
SetCriticalSectionSpinCount
GetOEMCP
SetComputerNameExW
LocalFree
BackupSeek
GetDevicePowerState
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 8KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE