597011f5c57dae57df72893633144a24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

597011f5c57dae57df72893633144a24
Size

1.7MB
MD5

597011f5c57dae57df72893633144a24
SHA1

5b6b15fea769be2d7ba84e186620d89055d493ed
SHA256

91e907c699d994d40168e5950a85dfb5d9396d716b2efe1712dc93275d9b8edf
SHA512

ed2ae96ef0164f49d3d5b3b77a9d435c54b4f687aa480e1a03c6b09ecc1d7d34abea571b7701beb60dba7f93647b01323f5911c43a23f059febf21c7e4f3350c
SSDEEP

49152:xcl+6hQNM50dhb5vlyLNDPLATZXMoJUPuZFOqDZuYePY:xcY6h++0dztQbLAeoJUWfOq1uzPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
597011f5c57dae57df72893633144a24

Files

597011f5c57dae57df72893633144a24
.exe windows:5 windows x86 arch:x86

d80328aac7d17cc2f23a022078203390

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shell32

ShellExecuteW

version

GetFileVersionInfoSizeW

user32

CharUpperBuffW

oleaut32

SysAllocStringLen

netapi32

NetWkstaGetInfo

advapi32

RegQueryValueExW

Sections

.text
Size: 1.6MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE