51e48a519e673a8dfa2567fa74224243 | Triage

Sharing

General

Target

51e48a519e673a8dfa2567fa74224243
Size

28KB
MD5

51e48a519e673a8dfa2567fa74224243
SHA1

cf8a81d95a9d0736423beaaca35c5a104d87eb9d
SHA256

dcc39f922c47d181d61bad608d80afdf2cb2118fa3363893cfc540a374ab7b33
SHA512

9c7104a20f6ae7d0742c719024f4b9f31cac3a54ccc5d6d09c252013486d17aab248bb8aa4b49214acda3cd04daecda91317be680a0ab1add722dec8b15d21b7
SSDEEP

768:GPJmorW/BhrncnSnWBs0+xL8m4evcOvf+f:GPJmImnr8s0+aKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51e48a519e673a8dfa2567fa74224243

Files

51e48a519e673a8dfa2567fa74224243
.exe windows:4 windows x86 arch:x86

ee94fee6d96573394df1ccff29966ad9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_tell
_rotr
_tzset
_umask
_spawnl
_stat64

kernel32

GetNextVDMCommand
GetDriveTypeA
GetStdHandle
GetSystemInfo
GetVersion
GlobalAlloc

Sections

.text
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE