634e1caf2247addb6bd12dda52dbd4de | Triage

Sharing

General

Target

634e1caf2247addb6bd12dda52dbd4de
Size

58KB
MD5

634e1caf2247addb6bd12dda52dbd4de
SHA1

c8237af522b7ff52f5febd54d66a63e193c50aa4
SHA256

3e23c4a8083651cc4ccdab917272c4b3f3c5fa70acb89e1123a4723c34637156
SHA512

dc7ecc5e651266263c67fb14e85417364037aaa7a8067583ba5471ab8b98adafacbb3b3afe977637963eb4dbf7aaf655c48eea15c57a8162e870f7f5a3f68f84
SSDEEP

1536:SFZG2U20yxmLNIF4vUa3PnPVGdEMNLE+JyddKi+tNeRYlHttkpcyK+4QsKgVUlbB:8HCjeiVvmWgeZfzIgN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634e1caf2247addb6bd12dda52dbd4de

Files

634e1caf2247addb6bd12dda52dbd4de
.exe windows:4 windows x86 arch:x86

d9f8b2b7e5f5e90c7af423ad4f4e4c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetUserDefaultLangID
GetNumaNodeProcessorMask
UnmapViewOfFile
IsValidLanguageGroup
SetConsoleCtrlHandler
FoldStringW
BackupSeek
GetConsoleKeyboardLayoutNameA
CommConfigDialogW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE