b746c43a591aff8b7d03dae74db02171239274bfd3e51c986b0f1d7f217568c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b746c43a591aff8b7d03dae74db02171239274bfd3e51c986b0f1d7f217568c8
Size

6KB
MD5

2e2d064957c268543e02c7642d7a998d
SHA1

1e09b583a2d19186005356293ada1aa409601ec1
SHA256

b746c43a591aff8b7d03dae74db02171239274bfd3e51c986b0f1d7f217568c8
SHA512

b4e076affaa46a8be26531cbbb8a5460c4169d4c6e6400cc2457abe2976d328996af4b6f8f2b64fb6d7617a924c7827852aa07b7b2f23d6559cff4367d26cb71
SSDEEP

48:S3bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uhc:q0mIGnFc/38+N4ZHJWSY9FI5Wqa/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b746c43a591aff8b7d03dae74db02171239274bfd3e51c986b0f1d7f217568c8

Files

b746c43a591aff8b7d03dae74db02171239274bfd3e51c986b0f1d7f217568c8
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ