5836af046189a99077add4a56f1dbf80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5836af046189a99077add4a56f1dbf80
Size

63KB
MD5

5836af046189a99077add4a56f1dbf80
SHA1

602dff71611f44c8b19ad96b4979a606799597df
SHA256

395dfdc0eeeda93b8b6715533421d05c33d5c083c36c2ff6b9ea92b308e41b01
SHA512

e431129b6ff5401bccf48110bf76e45ea9d6de79928a96f58fd848743b3d1d22e69ef4bbf7597760c8639530be759f3d84f5ba87dbdd71a5bc7673a0970cbb19
SSDEEP

1536:aKsfS0BWH2zpIKMxojSiz+9zfJT+vdvKV6yT4NUXyZRlN:adS6peWnz+9zqdSV/4+X0R/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5836af046189a99077add4a56f1dbf80

Files

5836af046189a99077add4a56f1dbf80
.exe windows:4 windows x86 arch:x86

2cccc837bf824c2becd0211775ec17c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrencyFormatW
PrivCopyFileExW
GetModuleHandleExA
_lopen
EnumDateFormatsA
SetErrorMode
FreeResource
CancelWaitableTimer
LocalAlloc
CommConfigDialogA
GetEnvironmentStringsW
HeapUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE