59678216f1bf5d94b6427cfc80024c1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59678216f1bf5d94b6427cfc80024c1b
Size

203KB
MD5

59678216f1bf5d94b6427cfc80024c1b
SHA1

d35531d494216e1d02cc78fd147b2af3d4026826
SHA256

fdf82deeae2c34d76c49aa7821d2b0f304cbd8dd3c5ac252f32f478d8105d056
SHA512

71766d731a852b17238067b776a9f4d64052f9a6543eb3774ec6a4211b50be549a8472e894ae6e0e8392d08a37e35e1126b39b4e4130c6858c82ce3a8218c9c6
SSDEEP

3072:EEboIex7JbMRieLJh0ovPaL0qzg5jCNs/qJFw7Kj+O0YPWpI:yIGJbMRLJhVPBnjCa/oSI+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59678216f1bf5d94b6427cfc80024c1b

Files

59678216f1bf5d94b6427cfc80024c1b
.exe windows:5 windows x86 arch:x86

17fcd786e1a308b9ea6dee49dda53938

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AssignProcessToJobObject
CreateIoCompletionPort
LoadLibraryA
LockFile
FreeEnvironmentStringsW
SizeofResource
AttachConsole
VirtualAlloc
GetProcAddress

user32

GetMenuState

gdi32

LineTo
StrokePath
CreateCompatibleDC
BitBlt
GetTextCharsetInfo

Exports

Exports

bubanuvf
qcfjqjrs
rrurghqqjfdisc

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ