256c0f80e6b94ab97d677ca562bb6fa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

256c0f80e6b94ab97d677ca562bb6fa6
Size

224KB
MD5

256c0f80e6b94ab97d677ca562bb6fa6
SHA1

364eefcea93d7d4315c4e62e56c3f99063ea4106
SHA256

a4bbac6b142c63da7c64937cc5beda93009b5be72481e98d514d62ee29801b12
SHA512

b196de279b9196f32cbea1758d4d6f8fc4eb6d430aaa63574d19eab9562ddb2a71b0019e48bdcd237f8d57f6c7831cbbf818a29e3d3db2cd59e86554a2fc6b18
SSDEEP

3072:bsNDx0HQJJdrGKJxLAITWYtop/nqsXYeMZiYEQ6B7YV5k3eLGtvMy2+Uf7pdh:bIJLGGOI98Pl3MUYEJMV5k3eytfL8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256c0f80e6b94ab97d677ca562bb6fa6

Files

256c0f80e6b94ab97d677ca562bb6fa6
.exe windows:6 windows x86 arch:x86

35807dcde258f88fa3ce5c21adc607fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

LoadStringW

Sections

.text
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ