5277296469c2f53d45610b2af992548a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5277296469c2f53d45610b2af992548a
Size

269KB
MD5

5277296469c2f53d45610b2af992548a
SHA1

f9f52511100cce49db421513de897f5da23bb9d1
SHA256

886c8c602893f72dd27cf3a7b8c91d26ee5b1e89b874d4352ca0f0164d51b3e8
SHA512

5d04288b3d8595f09a44811c72fa1b5c2c43ecc5256efab8d4c5b0af404d5a56948f34d46d3714d43b99213ed4c6b5a17a4d1dc459f1775b00486236fa9f028e
SSDEEP

6144:V9UgFmPAcWpO85/joslbWlZd89QEdO9+MY0CqTvddK8:zUQmPBCfQb89HMYAvdb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5277296469c2f53d45610b2af992548a

Files

5277296469c2f53d45610b2af992548a
.exe windows:4 windows x86 arch:x86

6d6a713903226c99ad5f1e95303a685a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
FreeEnvironmentStringsA
ExpungeConsoleCommandHistoryA
GlobalUnlock
FreeEnvironmentStringsW
GetUserGeoID
VerifyConsoleIoHandle
RegisterWaitForInputIdle
GetTimeZoneInformation

user32

EnumDisplayMonitors
ReasonCodeNeedsComment
SendMessageA
LoadKeyboardLayoutA
PrivateExtractIconExW

ws2_32

WSASetServiceW
shutdown
inet_ntoa
WSApSetPostRoutine
WSAProviderConfigChange
FreeAddrInfoW
ntohs
WSACreateEvent
getsockopt

gdi32

GdiEntry13
CreateRectRgnIndirect
EngMultiByteToWideChar
DdEntry13
GetOutlineTextMetricsW
GetICMProfileA

Sections

.text
Size: 265KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ