269fc493853125afa5673596cc4b9aee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

269fc493853125afa5673596cc4b9aee
Size

180KB
MD5

269fc493853125afa5673596cc4b9aee
SHA1

d8bd44ebf25a77ba20f1dedf189fe6c9cd9807cb
SHA256

bb400a6786a5478605f132d1d1e71484742f19d59c9e2e8ee243df1d31a2032c
SHA512

0e5d3088e3b1ff16cad2bd98654bb9c8a5c652c71e5a6fe043bb846b64c5ea08308979beae09514c7214c0377d1b3c85802623b8686c908a52e197630248ab5f
SSDEEP

3072:91kd3DDcOC/7NEoLcv0COAoI0IVEqnpiVgMF5wbFFrGPeotLlaWrXJ5Ds:9+3DDcpZEoIv0CVoIjnwVLwPqPeoRAWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
269fc493853125afa5673596cc4b9aee

Files

269fc493853125afa5673596cc4b9aee
.exe windows:4 windows x86 arch:x86

bcd81398dc4991f2840c355c1d92baa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

47:d1^!j
Size: - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

?Aod<P0a
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

?$:@aZc-
Size: - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ahfB;XFl
Size: - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RkGg<Y]j
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

c6\h_9<s
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$/7KBR8"
Size: 4KB - Virtual size: 615B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ