58e6e1cf577d57c3e701518b7f8e0a19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58e6e1cf577d57c3e701518b7f8e0a19
Size

66KB
MD5

58e6e1cf577d57c3e701518b7f8e0a19
SHA1

f0caf0a7ce5d3ad33f6a2f4df4937f6c780cf5a5
SHA256

88afe4ed2d047c71b08d117d633f0ad88b1c8cf65f4ca11c2bf518e6e264d5e2
SHA512

29e79ec9d00d3831e7826cf1d9efa19cd1176d83acc2b25ce2dc239adb0b314aba18cf8f7e90b5154012e1560c647edd5a6835f683a904833c9e9bd8f1074f52
SSDEEP

1536:ML4I6YTX2oqNkjKfG8SgexsDdtW5n+3ej8a5VRniKhZ6Qr9:ML4mTXRqNkjKftfm+3ejn5nDZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58e6e1cf577d57c3e701518b7f8e0a19

Files

58e6e1cf577d57c3e701518b7f8e0a19
.exe windows:4 windows x86 arch:x86

e18b03909fa3f9e531deca4975e74609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SetFocus

kernel32

CloseHandle
GetVersionExA
GetFullPathNameW
CreateDirectoryW
SleepEx
SetErrorMode
ExitProcess
GetCommandLineA
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThreadId
VirtualProtect
GetACP

gdi32

DeleteObject

advapi32

RegDeleteKeyW

msvcrt

_wtoi

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE