512f8b49c975b77ca8b3afc18a00dcf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

512f8b49c975b77ca8b3afc18a00dcf4
Size

223KB
MD5

512f8b49c975b77ca8b3afc18a00dcf4
SHA1

4ac900e32fb05f00908658f01a43d3617346c9c3
SHA256

ad055ad804ed10a67cb492d078cac4cd5b9ed2e47771a2c0e935b0aea3c7a7de
SHA512

6afacb67255322b2c6723eb1daf29bcc1b83c928c9ff87231c22f053a907c1a0b52ff2bd90c5957312a9ceb4c9f7c8c8590d69672eb3cd5521da454ac22e75e5
SSDEEP

6144:wCYQF4ngdz0oPcq7c54yX72FU9rCxFkjCznA:xagdAo0qQ5372a9ePn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
512f8b49c975b77ca8b3afc18a00dcf4

Files

512f8b49c975b77ca8b3afc18a00dcf4
.exe windows:4 windows x86 arch:x86

b71d8c1931cb0a297806c1529ed52c6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle

Sections

.text
Size: 221KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ