634c707cbe3ce1194291ab053d345502 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

634c707cbe3ce1194291ab053d345502
Size

66KB
MD5

634c707cbe3ce1194291ab053d345502
SHA1

d3d2d199b3ef8947078eb9357799a8ac6a6ef606
SHA256

2f75482bbb26917581bb26190d2880e65da05e9f3c819101fc921837c98171bc
SHA512

7ebad1219c8eee58ae09e0b371a749c671855278acea989ef4b1e8d6e70b6cfc690fc9e9f8c4a45c6a9091a3a29b4afb496e9a804edda7bfa0112e89df177b70
SSDEEP

1536:J5qaJq9XqHNUtwU9EbVU6NexPG95hiF2:LH096HKsPQBG95hI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634c707cbe3ce1194291ab053d345502

Files

634c707cbe3ce1194291ab053d345502
.exe windows:4 windows x86 arch:x86

1ca376e7120aead566ebcc12b1a6c38a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCharType
LZDone
HeapValidate
SetComputerNameExW
WriteConsoleInputVDMW
GetDateFormatW
DeleteTimerQueueTimer
ReadConsoleOutputW
FindNextVolumeW
GetVolumePathNameA
DosPathToSessionPathA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE