59cfaea455a62b36a8326f1084f01acc | Triage

Sharing

General

Target

59cfaea455a62b36a8326f1084f01acc
Size

19KB
MD5

59cfaea455a62b36a8326f1084f01acc
SHA1

c742355583773c02c505044d6cf55b6d7477a10c
SHA256

e329c82775d3f6099d95bc4d0b7dcc2dd143c5b534e6be29670065dbf8347951
SHA512

43e44958959f48ec446312df5d9996cddf1fa31b2f16ee6d01d01ef479e732670c7d657fb9819b76cd1631d6f20676a76968b9772d41695549c1f8ccd1e1529f
SSDEEP

384:xqNd28SJ1EgkB3bZrm420KeYzBDcfEINPul0fG34o:xKnqugkNFKrzBDcfjNWl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59cfaea455a62b36a8326f1084f01acc

Files

59cfaea455a62b36a8326f1084f01acc
.exe windows:4 windows x86 arch:x86

f1dc9f70b7904bbba122dc5aa08c37ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
LoadLibraryA
WaitForSingleObject
GetModuleHandleA
CloseHandle
GetCurrentProcessId
GetTempPathA
lstrcpyA
lstrlenA
SetFilePointer
GetModuleFileNameA
CreateFileA
ExitProcess
SetEvent
WriteFile
ExitThread
GetVersionExA
CreateThread
RtlUnwind

user32

SetThreadDesktop
ShowWindow
PeekMessageA
CreateWindowExA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
CharToOemA
GetTopWindow
wsprintfA
IsWindow
CreateDesktopA

shell32

SHGetFolderPathA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ