2964384762f82802dc2184b72ac11886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2964384762f82802dc2184b72ac11886
Size

76KB
MD5

2964384762f82802dc2184b72ac11886
SHA1

ccacca64fcbf1fcccb0af98852dbeacb45836611
SHA256

41d30e8f48fe8cb65ae09a94192d825cdf0b5d588ba5f077cbcd5aad190763c7
SHA512

dd14462b1f20d21ec62f2c081b7bc40223094967a329edabc9ea193d4c7cc9e72b8da8a899331608acf404014c387f5cf45a36a4232f4999da6889f599616b82
SSDEEP

1536:n5555rk3zp2Gnmj9COE27GQMZ7HboPjFEW1Z/zM52ZkimopjVrs2ryrd1vUQuq6:n5555rk3d5nyfE27GltyrH+QHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2964384762f82802dc2184b72ac11886

Files

2964384762f82802dc2184b72ac11886
.exe windows:4 windows x86 arch:x86

249fa8f239211d1d2873c655cd866027

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputAttribute
SwitchToThread
WritePrivateProfileSectionW
GlobalLock
GetMailslotInfo
VirtualLock
GetConsoleAliasW
SearchPathW
RtlCaptureStackBackTrace
CreateHardLinkA
VDMConsoleOperation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE