187282dab03d81a9614891ffd8e0930c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

187282dab03d81a9614891ffd8e0930c
Size

60KB
MD5

187282dab03d81a9614891ffd8e0930c
SHA1

d5ea987d5497e57cf34643b9e8eaa3f6e719c6b3
SHA256

2305f2b57b0a13c3ad557eabd1cc456b83015930fd0a5e721dc182181d23db46
SHA512

1dbccebed4a982096e0b330a00290223ba04c777b890ebd03aa5cd1734d12b9cd946c058789a2ebcf3cbedc49dd0da8b5f95c1c0f2638a3418224a27e509773e
SSDEEP

1536:+0z2NYkrl3likpDnfvoVrhkLmBzjcWXzF:+0DkrHikpDfSlkLmxj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
187282dab03d81a9614891ffd8e0930c

Files

187282dab03d81a9614891ffd8e0930c
.exe windows:4 windows x86 arch:x86

461f9f094394f450b48fe39b12592400

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
RequestDeviceWakeup
SetConsoleTextAttribute
GlobalReAlloc
GetCurrentDirectoryA
GetTapeParameters
FatalAppExitA
MapViewOfFileEx
InterlockedExchange
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

atsec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

atsec1
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

atsec2
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atsec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ