57cfc7136ea7a65a4b1a67c9a6169d40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57cfc7136ea7a65a4b1a67c9a6169d40
Size

76KB
MD5

57cfc7136ea7a65a4b1a67c9a6169d40
SHA1

c55f811eba5a19835c5e7884a27e8077960a1316
SHA256

6b9fbd667e6a3d2a630a9802f80b591913f87221ba8ca9c732cb48c27ae107db
SHA512

8d439e14112fd72c97adc6f720f8cbf710829dc16b420621c89345e315646fae0fb150399abbfb95d5e8944adb9df392a8c8c1e9b70e3eae5e48bd31c231acc1
SSDEEP

1536:JfwVwoRl/UZ9rQ+sHWkQK3snf3QZWpjVrs2ryrd1vUQuq6:WVwok9mYK3wVHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57cfc7136ea7a65a4b1a67c9a6169d40

Files

57cfc7136ea7a65a4b1a67c9a6169d40
.exe windows:4 windows x86 arch:x86

85d15c7b16ffdb1279b97015464d1f6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetProcessIoCounters
UnmapViewOfFile
GetSystemDefaultUILanguage
EnumLanguageGroupLocalesW
ReadConsoleOutputAttribute
EndUpdateResourceA
SetFileShortNameA
QueryActCtxW
ResumeThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE