186dacfca9e3b2a3cf2e852611fac37664e2b1145034b396075c481556310694 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

186dacfca9e3b2a3cf2e852611fac37664e2b1145034b396075c481556310694
Size

5KB
MD5

28b096185d23779c2ba930cd50035029
SHA1

3208a5a5524e0a6c853d7805de7c2b18f872ce40
SHA256

186dacfca9e3b2a3cf2e852611fac37664e2b1145034b396075c481556310694
SHA512

7c8591428f993b0a40dfcd580295b2ce4fc64f2152f3f6259d3b96384c5a323a72fc3df9107d08cc42e93b7802718684576ca0a278bdaf0eb89e8a5073dbc32f
SSDEEP

48:6fsLfDnzHUDYtbZ5/E51DHv7giC/Y7Bcb6cwbrUGsJyTANUb+N055555FFtMP7gv:sWlVv8DHvkiCB4N4Ub+u55555FFOeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
186dacfca9e3b2a3cf2e852611fac37664e2b1145034b396075c481556310694

Files

186dacfca9e3b2a3cf2e852611fac37664e2b1145034b396075c481556310694
.exe windows:4 windows x64 arch:x64

bc2bfcca3db4da8bb13705f1b13e8419

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

strlen
strstr
malloc
sscanf
clock
printf
memset
fopen
fscanf
fclose
memcpy
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

kernel32

Sleep
VirtualAlloc

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ