59c15baf687dd6ca5ef757afb65c850b | Triage

Sharing

General

Target

59c15baf687dd6ca5ef757afb65c850b
Size

93KB
MD5

59c15baf687dd6ca5ef757afb65c850b
SHA1

aa22e556d7c177a6c77074a0a67dc02d42072a25
SHA256

e5acd43448443db210d1399c074fa719ca87c454112b8ed5095add444a908082
SHA512

4d7ac05c1f36de2ec0c92f6993ec014d08ddc9b7082212097ce3d8bad9366b6450b0d347ea47783bd6d308a407a136a9df382832666bd4a194886ff2387b7e71
SSDEEP

1536:/1TEgylLlWBjvp72Ag7RgXGQNjzjsFg9m/c9feujNgiqmNTgfv2LwfV8/0gNh:xOE8QGQNYaEU95+igfMwfVkh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59c15baf687dd6ca5ef757afb65c850b

Files

59c15baf687dd6ca5ef757afb65c850b
.dll windows:4 windows x86 arch:x86

4c32ce93d6e3ffdc13897c584eccc2c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetVersion
OpenFile
OpenFileMappingA
SetCurrentDirectoryA
lstrcpyA
lstrcpynA
lstrlenA

Sections

.sforce3
Size: 26KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sforce3
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brick
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ