f691cabac1bd3a26a6ffdad79b72a3e8f9cb1a6aceb5de55b3feea2126ba3212 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f691cabac1bd3a26a6ffdad79b72a3e8f9cb1a6aceb5de55b3feea2126ba3212
Size

120.5MB
MD5

276180816e6d98b0ff1af901fbf8e5c1
SHA1

462fd6b62fcfd9023b6511bb79f1d45bbba4fb7a
SHA256

f691cabac1bd3a26a6ffdad79b72a3e8f9cb1a6aceb5de55b3feea2126ba3212
SHA512

8226f3352c33169151bd679bfe106b6da8c5aeb4b6a3639115dba0cd6651fac1e843934bdcaf33fc66e7b1dc1d50172e07c4ae2ef099a75229b2e6f803154da2
SSDEEP

1572864:8jRSs4JcyAxAC0iP2XFuMBsA9xb261ZNQsBXXGFtkl3iuJr815QvIHdotkugG3Gv:8tSVRiPwxS6P32qoGx31vnU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f691cabac1bd3a26a6ffdad79b72a3e8f9cb1a6aceb5de55b3feea2126ba3212

Files

f691cabac1bd3a26a6ffdad79b72a3e8f9cb1a6aceb5de55b3feea2126ba3212
.exe windows:6 windows x86 arch:x86

ff66a4acdd0e04094ba9813691b7a441

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
IsWow64Process
OpenProcess
GetLastError
DuplicateHandle
GetCommandLineW
OpenFileMappingW
MapViewOfFile
SetEvent
UnmapViewOfFile
CloseHandle
GetCommandLineA
CreateFileW
CreateFileMappingW
GetFileSizeEx
VirtualAlloc
VirtualFree
LoadLibraryW
SetEnvironmentVariableW
ExitProcess
GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcpad
Size: - Virtual size: 11.7MB

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ