245f6cd2e5bfe1aa391e82a0204b7502 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

245f6cd2e5bfe1aa391e82a0204b7502
Size

56KB
MD5

245f6cd2e5bfe1aa391e82a0204b7502
SHA1

349d9df54abe46cf166f53199fa0e41deb3a65d7
SHA256

f0597a69dc06e45e5b5446b3be7f29f7e018bda4b8f3237315b9329d354cc10d
SHA512

216e74268ce51370c138d8b86c2f03aca4a59e7eb6bec5114148748ce320e90a5d1d6b7909662f22c05c6bd5e0d24aaf041afed5a0f4ebca7e93d365f65fef75
SSDEEP

1536:CEGX43sfqYqcodMTwwAzvUxWMfUt5DYvrymfJ:ZsfqYq1OTDa0q8vmmfJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
245f6cd2e5bfe1aa391e82a0204b7502

Files

245f6cd2e5bfe1aa391e82a0204b7502
.exe windows:4 windows x86 arch:x86

6eae3244cc07f034a83eef5eba34add5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
WriteProfileSectionA
GetConsoleCharType
GetEnvironmentVariableW
WriteConsoleOutputAttribute
EnumSystemCodePagesW
OpenFileMappingA
ReplaceFile
SetThreadIdealProcessor
SetTapePosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE