588573dc336b3695e9fdb890eefd26db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

588573dc336b3695e9fdb890eefd26db
Size

8KB
MD5

588573dc336b3695e9fdb890eefd26db
SHA1

ea269ad4245571bbdb9c75bb5f8d7f8f32710c10
SHA256

85678c453edae6ff28f4bcc3f661b4b3c9bfa207022ee1f5cb6d59d901a25246
SHA512

a0eb6f78d743df8f5eb13f898101816e41c450f2ed202715f741f2aa699b3397747b8ebdc03c7b35823327d362ac793b501d562188913a8fea105cf81d2dce24
SSDEEP

192:UkBBxQ9J2uUOStaD1wa7BNMn5jlBw23M6ULgp:tvy4uCKLMnNlBw2LUL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
588573dc336b3695e9fdb890eefd26db

Files

588573dc336b3695e9fdb890eefd26db
.exe windows:4 windows x86 arch:x86

d3f661728cb9638174b23dcb9cf98fba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
GetTickCount
GetCommandLineA
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
IsDebuggerPresent
GetVersionExA
CloseHandle
GetCurrentProcessId
CreateThread
lstrcpyA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE