59211859064972bc99f7c168352abc90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59211859064972bc99f7c168352abc90
Size

96KB
MD5

59211859064972bc99f7c168352abc90
SHA1

d4d99b63340c5027d4cd83d7cd019e2917039c9f
SHA256

7c75c8817bfbfd5f9b39a95411ba08946230551f04498761d76b6abb9d4eaa9e
SHA512

a4616d55f231106e7cb1af293933680ac2aebb865d7ae4b15bbc896e831f6bbc7d641c42c9a3a4ce2cf8b7fa4411f51ebfc8b74b669b6cc43f3325a9e20dca23
SSDEEP

1536:V5YMxDhpywu22PTv5tfUVaCJFAlSfzSx6Kn:4sBpmrEV7AwzA6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59211859064972bc99f7c168352abc90

Files

59211859064972bc99f7c168352abc90
.exe windows:5 windows x86 arch:x86

b650d69ba2eb49af97c57821cf08461b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ