531ac1f80dab6854ea74087c462f192c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

531ac1f80dab6854ea74087c462f192c
Size

66KB
MD5

531ac1f80dab6854ea74087c462f192c
SHA1

5a9c885bfdcb551f07721c53197b9c2d0bf7f2ba
SHA256

3ed5332c519dc644c2be87ff297c52344dd6505f55a5fd839fedbeea7c7fd544
SHA512

2be9bc92dbc676aeab536c88cd6a538f7419815cccb51897dddd73ff2a983e75302ec9f46190c7b0fb30b4366faafc5ca7751fdaf2b16d9bb313fc0c13817a92
SSDEEP

1536:k8tKsUc/exKkBBCEUV412N9CcFabX2KN20T:GsUc2xKkB8RV41wNYbmSh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
531ac1f80dab6854ea74087c462f192c

Files

531ac1f80dab6854ea74087c462f192c
.exe windows:4 windows x86 arch:x86

f7d9c4fe2746374675d572cc6bd17b5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAce
ReadEventLogW
CryptGenKey
PrivilegeCheck
CryptSetHashParam

kernel32

Beep
CreateSemaphoreW
EndUpdateResourceW
CopyFileExW
GetACP
GetDriveTypeW
GetExitCodeThread

user32

GetCursor
GetAsyncKeyState
GetProcessWindowStation
MapDialogRect
SetMenu
SetClipboardData

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE