15c8901c2e9af261b28171eb444c797e | Triage

Sharing

General

Target

15c8901c2e9af261b28171eb444c797e
Size

83KB
MD5

15c8901c2e9af261b28171eb444c797e
SHA1

a770440d6790e93929b0ebc8d356a318ea7421e9
SHA256

4f9797ff6c6156bea63d0a3be1ff866339004ce08e5bd933aeb72ce43a1771e3
SHA512

db907acdea0e914ab8349e5ac4cf107bdc6c183f6a172998d7db090ba9a17ab50ad1eb41b612879f3b61724e8e2e68e4153712e7920185bff6ba95731133e42a
SSDEEP

1536:dbKXd/s6ZAuOPxCRK+UDMIYeT0YH9cHP+eqq/piIRbqSOARQpjVrs2ryrd1vUQuP:+d/s6muOPIRvUDuhCLLgiIRbqSdiHs2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c8901c2e9af261b28171eb444c797e

Files

15c8901c2e9af261b28171eb444c797e
.exe windows:4 windows x86 arch:x86

bb492c2d891be89c7328f5c5f6c7c786

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
LoadLibraryA
GetProfileIntA
EnumResourceNamesA
FindNextChangeNotification
AddLocalAlternateComputerNameA
GetProcessHeaps
FoldStringW
GetCurrencyFormatW
FreeLibraryAndExitThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE