449ccfe6700c33620cb4b34b5401f915 | Triage

Sharing

General

Target

449ccfe6700c33620cb4b34b5401f915
Size

19KB
MD5

449ccfe6700c33620cb4b34b5401f915
SHA1

8f79d86dc2b1e43887a648f74c51f2a978eadb95
SHA256

092675e590e4a4e6140e63d7687db9d97ee58764a65388cbdbcc6591df1ff13e
SHA512

f6f8045c3f46dde53ebb84ac313a7692a9775e5ab6737002d1ffe61a38a5a68e33771e05d0bd624c5998fd2d84b1315fb8b2c452ae7e3d8fc3560b05ee31a21d
SSDEEP

384:30N3Pch9ueU2PX+lOuHah2Q/HWUpn4H1m/cNZcJOyaTc4EHm9oaUqPVjY3aomI:3+3PchK2/+lOvF/HBZkqcNSJOyaTc4Eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
449ccfe6700c33620cb4b34b5401f915

Files

449ccfe6700c33620cb4b34b5401f915
.exe windows:4 windows x86 arch:x86

528dabc5259f8266f6bc873daaa9fd54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
CloseHandle
InterlockedExchangeAdd
lstrlenW
QueryInformationJobObject
CreateTapePartition
_lopen
GetMailslotInfo
SetThreadIdealProcessor
EraseTape
ValidateLCType
OpenProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE