5684ca9f922cd169d562e57eb43f4b4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5684ca9f922cd169d562e57eb43f4b4c
Size

22KB
MD5

5684ca9f922cd169d562e57eb43f4b4c
SHA1

94b004f606b7645231d9e1d1d8e121688c258cd5
SHA256

b8da3bd50555d407847a30cb408070886dc5e561e77d36cd46e58535c489da9f
SHA512

6853e0e067f46a9936ea89509a5c2db26e3c17f6fbb84521b99845107f430ef1c17aea5f29f5b5a68159a623a894fee725f2ee50a98d4ee154e06b575ae6afbf
SSDEEP

384:KVecuzNBtYc1/wFnzdYjkQUEKfUETDKDxy5pC2ZAB2Qa6:wqzZYctsnCAQZEXgopCRBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5684ca9f922cd169d562e57eb43f4b4c

Files

5684ca9f922cd169d562e57eb43f4b4c
.exe windows:1 windows x86 arch:x86

c421b1fd022489e5cd397726718e4943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GetDefaultCommConfigW
FindAtomW
GetTimeFormatW
OpenJobObjectA
OpenEventA
QueryDosDeviceW
CompareStringA
GetConsoleInputExeNameA
EnumCalendarInfoA
GetCommandLineW
WriteProfileSectionA
QueryDosDeviceW

user32

IMPSetIMEA
GetMessageA
LoadImageA
OemToCharW
PostThreadMessageW

gdi32

GetCharacterPlacementA
EnumFontFamiliesExA
GetEnhMetaFileDescriptionA
GetGlyphOutlineA
EnumFontsA
GetCharWidthFloatA
CreateDCA

Sections

.��
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1024B - Virtual size: 795B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ