596946966e8c91d9b0ed3ba4c15155a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

596946966e8c91d9b0ed3ba4c15155a2
Size

359KB
MD5

596946966e8c91d9b0ed3ba4c15155a2
SHA1

86be42ecd9cb62e6d3de07ea3ca4a7aacfc0047d
SHA256

5cd46d66677bfde24a1cb15fff7d9cca73e43b61d968fc3357450bc8dd0380ab
SHA512

7cbc7e2b24e6620634ee84c19918922def1183264be73f28b2b8ff6303f98dcadf76347b1d2605541bffa8ec9f3d8d95c06b0a13ab5ecaefd2b3b94f06301c3e
SSDEEP

6144:DvsNvDQ18qO4ULMs1fQD6WxNTuUrNc3aqIlL6pJs4MvxXBCoeKF1V9TInA:jsN7+O4ULMsmDNxNTxNcq36M4wxX5eKL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
596946966e8c91d9b0ed3ba4c15155a2

Files

596946966e8c91d9b0ed3ba4c15155a2
.exe windows:4 windows x86 arch:x86

1a95e125fc87991596298e6637676113

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FindFirstFileW
CopyFileW
EnumCalendarInfoExA
FindNextFileW
SetFileAttributesW
MoveFileW
FindClose
SetLastError
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
FormatMessageW
GetTickCount
CreateEventW
CreateThread
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
ResetEvent
SetEvent
GetFileAttributesExW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
CloseHandle
WaitForSingleObject
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
LocalFree
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedExchange

oleaut32

VARIANT_UserFree
SafeArrayCreateEx
VarDateFromI4
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen

msvfw32

ICInfo

Sections

.text
Size: 247KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE