59ff1bbb3ac48f8a271c2c10afd07269 | Triage

Sharing

General

Target

59ff1bbb3ac48f8a271c2c10afd07269
Size

254KB
MD5

59ff1bbb3ac48f8a271c2c10afd07269
SHA1

8ca07a8457fc61955ce9d4000c1865bb6fa8e04c
SHA256

691aa7467d0f3f2e779a7441f4e46f12f9915e8fe9052a4b877ba08051981a2c
SHA512

7cc5f769902bded50634ad2bb15024d43a1d8b60321f781e462e4857494d16d1670cd006eef4eac81bfc3f1d58b044622a2c75e3b7680d658c186970bf14b4f8
SSDEEP

6144:haF5DXU7maEPKJnocyEzMEGH+BhZJm38TYouT:s7DX7FCucNAEvrTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59ff1bbb3ac48f8a271c2c10afd07269

Files

59ff1bbb3ac48f8a271c2c10afd07269
.exe windows:4 windows x86 arch:x86

936f6e9f7377a90e19f9477f07315f44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
RtlUnwind
CreateSemaphoreW
InitializeSListHead
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

GetRecordInfoFromTypeInfo
OleLoadPicture
VariantChangeTypeEx
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 148KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ