529db84e56a6c1a2a085306f98880e86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

529db84e56a6c1a2a085306f98880e86
Size

66KB
MD5

529db84e56a6c1a2a085306f98880e86
SHA1

4d99bcc8f999fe82a5511ea30c21be2abfd42749
SHA256

22c48d0aeb857a5e3e65ce4da1dbfb422021d9e84ca9a44db1313b4302a52fb3
SHA512

07028709b93ed6ee53d2be80a312fee2f14f81b1bc8e6b233b8130a95a4f8ee38430c72aa8e8f072aa0db1b2e8bd5979da15db648f9a982edf5b7a20562290a6
SSDEEP

1536:GEzoezWWb0EKjRzbBERzfbGZaNcIp79PFOcvyTBbqQ9vkTWB+lTgH3:GBYWWb0njJbuR/G875FZyVbBkyMlTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
529db84e56a6c1a2a085306f98880e86

Files

529db84e56a6c1a2a085306f98880e86
.exe windows:4 windows x86 arch:x86

76b659fa5eb361aa2e95120366f4e1ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
FindFirstFileExW
GetUserDefaultLangID
FormatMessageA
DnsHostnameToComputerNameA
MoveFileExW
Process32FirstW
SetVolumeMountPointW
SetDefaultCommConfigW
OpenProfileUserMapping

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE