480da04cfffa57d4153801552f63fb4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

480da04cfffa57d4153801552f63fb4f
Size

428KB
MD5

480da04cfffa57d4153801552f63fb4f
SHA1

6ca400a9c27a73c0174c83107c8c5c3125154d0d
SHA256

0a8c093ba282b608fe04c8f2d2dcb20289c75a9f109b92d4ff34ad48c8c49b74
SHA512

9c054272bd05edad0b79c6f83c1164919a8fb8353f06e9df1ea30a959b54603b366ed6d79f53280eafb267596b4659a2e9b82247de17d4b6258875f88783f9ed
SSDEEP

12288:wrfJolmJxRHHE6mRsc9gC8NLhPtD6IA1eDo3aCmFkwdbV8aV:wrfJ4OWqo3tmpvh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
480da04cfffa57d4153801552f63fb4f

Files

480da04cfffa57d4153801552f63fb4f
.exe windows:6 windows x86 arch:x86

35807dcde258f88fa3ce5c21adc607fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

LoadStringW

Sections

.text
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ