159547ca5aa7388dd988b408bde5b18f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159547ca5aa7388dd988b408bde5b18f
Size

63KB
MD5

159547ca5aa7388dd988b408bde5b18f
SHA1

8939167b7293a4170fb7eeb89f90b984b0397aaf
SHA256

ac41e616b94c256b175f1be4ad313d9fa05564a4e94937808a4a753e36a0e12c
SHA512

2630a33c88f22c726f4332deeda1b501e55eccb1a578c744eee73cb430315ff10728dbf13b9dc5c47b8034fd2fb7c691e095fdd98ca77d6b7729bcad22c987a2
SSDEEP

1536:pIuB43lxjWOWWhZa0TROurde1FpDhNJn0qQC1Y/bVCzPs2bhqVDastxto:prS1xjvlg0TwkoPpDh8K1Y/bsEZVWsts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159547ca5aa7388dd988b408bde5b18f

Files

159547ca5aa7388dd988b408bde5b18f
.exe windows:4 windows x86 arch:x86

375710b40f68913e92c815b2367000b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushViewOfFile
GetNumberOfConsoleInputEvents
OpenFile
FindNextVolumeW
GetCommState
AddLocalAlternateComputerNameA
GetProcessPriorityBoost
RegisterWaitForSingleObjectEx
TlsAlloc
SetEvent
GetCurrencyFormatW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE