58983126f0cfc03e2821523b75225fad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58983126f0cfc03e2821523b75225fad
Size

314KB
MD5

58983126f0cfc03e2821523b75225fad
SHA1

7dfe7f997f6a9ab94de6a4883fcdb6c9b33e5adc
SHA256

1dc052ecb5fe63d663ffaa738bbe44be5a7a0ff62da0d04cb829ab8492409d88
SHA512

1f9a5ff8bd5978dc67c60a4eb3b8bc6260defab8550e801d28732d2893fc5fe8f7780a333d0be4b42d5cff40d10795e532efe293f0a3387b66a4cb3d4d13c633
SSDEEP

6144:vODnDTk9stxcDkCBQ2KTJVFHy/Oyrbl84:vqbCBCJbytbl84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58983126f0cfc03e2821523b75225fad

Files

58983126f0cfc03e2821523b75225fad
.exe windows:4 windows x86 arch:x86

b1f41127e51c4a09fcb0aec80965d5ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetTempPathA
lstrcatA
CreateFileA
FindResourceA
LoadResource
SizeofResource
WriteFile
CloseHandle
LoadLibraryA
GetProcAddress
EnumResourceNamesA
ExitProcess

user32

LoadIconA
CharLowerA

Sections

.text
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ