57b79546ab25f7a62cc81219d2057e10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57b79546ab25f7a62cc81219d2057e10
Size

187KB
MD5

57b79546ab25f7a62cc81219d2057e10
SHA1

f2c90838d785e3b4f17a2b2110e9c21ac2f82ce2
SHA256

7e292d336b933655b0233bfb4d4bd6a55740e496212bc39268293b9b00b5034f
SHA512

ffc322b020fae8a6acae6bbfa833fb3a55d01b6322c4493a6bb4eedf55b26de8989a3ec13ba947709923a53fde52d1204dd6b11a3434021b11f5d3b9831a3f15
SSDEEP

3072:bEn0RXZmR9cWaapAcBCOrts7McBuHTAgq9UFB9BB9JO+r0TywVj:gn0REmPIAiBxPz7q9UL9q+o2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57b79546ab25f7a62cc81219d2057e10

Files

57b79546ab25f7a62cc81219d2057e10
.exe windows:4 windows x86 arch:x86

7b0e14c283482772bd742dbe87be5a24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GlobalHandle
SetConsoleCP
OpenThread
GetVolumeInformationW
RegisterWaitForSingleObjectEx
CancelWaitableTimer
MapViewOfFile
SetConsoleNumberOfCommandsW
FindFirstChangeNotificationW
GetSystemDirectoryA
GetStringTypeExW
DeleteTimerQueue
Toolhelp32ReadProcessMemory
FindResourceW
Process32NextW
CreateMailslotW
EnumCalendarInfoExA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE