1731148bbb5798a3c4c6f0daca6a1fe4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1731148bbb5798a3c4c6f0daca6a1fe4
Size

71KB
MD5

1731148bbb5798a3c4c6f0daca6a1fe4
SHA1

1963f141056eeaae84dcdd76be134ef6b5a39f64
SHA256

83b880009a9a76d2d11ac46623bc384d5de406a48392d322e34966cde3cb3832
SHA512

5f73a5f1a04d8785bac665176e49cc14d3923fb120302b2b150f8c2fd3d7747a79c91be9e0bb76ef4545b6f0cb4ce61ded6c645f62c0cad0050e31471307f2ff
SSDEEP

1536:uDDHW2K2n5EhbxK+v3fjVXfpQkVXT7rKN331IUy8lM3ygaocNHNGCjkz:m2r2n509jvvdh0jkyfZjkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1731148bbb5798a3c4c6f0daca6a1fe4

Files

1731148bbb5798a3c4c6f0daca6a1fe4
.exe windows:4 windows x86 arch:x86

545a260f4f4a4e4cd562404e52d0ff82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
ReadFile
IsDebuggerPresent
ExpandEnvironmentStringsA
GetConsoleCP
GetTickCount
GlobalAlloc

msvcrt

_ltow
memcpy
tolower
_getcwd
_stricmp
wcscat
_snprintf

Sections

.text
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ