5934b64c7b3381af9a9d78c221d21ede | Triage

Sharing

General

Target

5934b64c7b3381af9a9d78c221d21ede
Size

83KB
MD5

5934b64c7b3381af9a9d78c221d21ede
SHA1

a2fafea80ac876f7c5bfb7a0d74604ae7bbea39d
SHA256

6e65917374364d4fbf7a63093a4e6407a4b9fd06d630fac53d10370c5b5525a4
SHA512

9df8843cd6eb7085facc635ab860a6e160306545cf37cb97932591164db97974549b256479a30744c0402cc8a5c71dbbfac2f8ae82d0f95058425e16d81661b7
SSDEEP

1536:fXksmTO/zCyiL3xEF4XnHDJ9pYT75Z9jEErxTWDTMqhGKYIZTET8bDQ:/kBTO/g7xEKXHDvpYRZ9jBkMqhGKZTbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5934b64c7b3381af9a9d78c221d21ede

Files

5934b64c7b3381af9a9d78c221d21ede
.exe windows:4 windows x86 arch:x86

835ec104bd1cb3cbcc68f6aa25812b8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleKeyboardLayoutNameA
GetSystemWow64DirectoryW
SetWaitableTimer
LZDone
ResetEvent
SetConsoleCommandHistoryMode
VerLanguageNameW
DeactivateActCtx
lstrcmpA
SetConsoleHardwareState
IsBadStringPtrW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE