097df8b74a6c8bfdbe166056e688b54b | Triage

Sharing

General

Target

097df8b74a6c8bfdbe166056e688b54b
Size

132KB
MD5

097df8b74a6c8bfdbe166056e688b54b
SHA1

1f21681c6ca20ea9af364e623ba7f41b0df9b40c
SHA256

df1f01f1ae9ff3ab6fd2332de0c5381ded2bafc7e96b9103d22cf563ff99e55d
SHA512

6e6d51952798dc39e8782fd9707f48593524e3b0c3439eb0ccc5d3496b978e2928785ca4eed7b15ad54efc914faa90a8cc5c94189e13c9a490b46deb293b2f31
SSDEEP

3072:zyXdSrK38pvrDJR9Svm/HWQ9grTgL/cLEpRSr:zyXgi8pvrDJRcs9aTgYQpR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
097df8b74a6c8bfdbe166056e688b54b

Files

097df8b74a6c8bfdbe166056e688b54b
.exe windows:4 windows x86 arch:x86

4a298dd84a9e7df282e400d79e6a72e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
LocalSize
SetStdHandle
HeapLock
LocalUnlock
GetShortPathNameA
AllocConsole
InterlockedCompareExchange
CompareFileTime
CancelDeviceWakeupRequest
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ