58535f9c470a5fd3e8f13d3e78f26b38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58535f9c470a5fd3e8f13d3e78f26b38
Size

60KB
MD5

58535f9c470a5fd3e8f13d3e78f26b38
SHA1

8304d6aa71bdfd112702a6a63f16ac38695aef7a
SHA256

8ae16fc468d8d7ee49348499fdeea83af4b41e975bbaf98ca9003046e1d6b481
SHA512

6d359406f665be75a52ea6a7ed8c19e605abf5f9bb10942eda5fb62fba5c69f0c850c80e90fb4cf9d48303ce2497ddf0ad6ad78adb1210f06aa42948d2a0cda4
SSDEEP

768:ZA7oEum8rT9yZITjF0VUJRzbHs7858UmeOb6:VMyT9y5+d58UP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58535f9c470a5fd3e8f13d3e78f26b38

Files

58535f9c470a5fd3e8f13d3e78f26b38
.exe windows:4 windows x86 arch:x86

cc6b0a4517c1d73d3c8a98d3791e08fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
sprintf
__CxxFrameHandler
strstr
strrchr
__set_app_type
_strlwr

kernel32

CreateMutexA
CreateThread
GetStartupInfoA
GetModuleHandleA
OpenProcess
WideCharToMultiByte
IsBadReadPtr
GetProcAddress
LoadResource
LockResource
SizeofResource
CreateFileA
LoadLibraryA
Sleep
GetLastError
MapViewOfFile
CloseHandle
GetModuleFileNameA
SetFileAttributesA

ole32

CoCreateInstance

oleaut32

SysFreeString
VariantClear

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE