59701e8055a6b96968e69f0009444155 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59701e8055a6b96968e69f0009444155
Size

109KB
MD5

59701e8055a6b96968e69f0009444155
SHA1

6ba50e7c1091d71df57a192f8227caaa456f599e
SHA256

e601cbd9fbc90f1ea11833b1f307188bae5e4054996a9c401d9bbbe9f41b4aff
SHA512

a1453263389f2ce9e63c36e537d714bc8c592826572ed742409efc3f8c5d4e1235b1a52c5708b5d4829cab47768e148bdb9a6a0f6df9e3fde7b3f773742018ad
SSDEEP

3072:IZ9ApCs8eQKIyswp7F9CoKkcEOtCjyfKI0Oph1:IZ9ArQ3wxF/Kxbfrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59701e8055a6b96968e69f0009444155

Files

59701e8055a6b96968e69f0009444155
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

xhpkihhuzea
yhhzsenlpptuxdy
ynmjngmwehx

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ