6472877c5936acd8bf7899196b2f0579 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6472877c5936acd8bf7899196b2f0579
Size

83KB
MD5

6472877c5936acd8bf7899196b2f0579
SHA1

51488ada9def93a44f3884c1021ae04fe2e5f535
SHA256

15da235418ca87446b15f2ee28baf700a8d507ab80e6d8046f7991e2516cfc40
SHA512

a6df764bcb361a7a967f5d61a43f54c1eaf891ffe4fa437bb65d79e3e7a82f16fef4513a08b2a1461676a39ef2be819615643455431c0be3e5b4b27a357e89a3
SSDEEP

1536:eEcR1ucysfdrbjlIS/Hin4AJ7ALM+nNe/j0jEErxTWDTMqhGKYIZTET8Z22:eEA0cycIS/NgWMENe0jBkMqhGKZTbZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6472877c5936acd8bf7899196b2f0579

Files

6472877c5936acd8bf7899196b2f0579
.exe windows:4 windows x86 arch:x86

23b3d11c54e2110601fa55e3abb4dcf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
SetCommState
ExitProcess
SetFileAttributesW
FreeUserPhysicalPages
SetLastError
QueryDosDeviceW
EndUpdateResourceW
GetConsoleCharType
SetConsoleNumberOfCommandsW
GetModuleFileNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE