659dcf233895105a6ee3252000fb8de5 | Triage

Sharing

General

Target

659dcf233895105a6ee3252000fb8de5
Size

31KB
MD5

659dcf233895105a6ee3252000fb8de5
SHA1

2a76b0d3ddce339766b9ad5eacb4c75ef2c9b6d4
SHA256

6dc72790f83318c53a69cbade11766c064c7c46a2ce6b0957bc3762212e7101f
SHA512

1a995219ea731f335524b488428ab6e8ec6ae9648bfbcd98cef71b19e9c8a354107ab5de061e96f591cb8d9bf3b7baedd546f1a5c09346190195a9a1de5ec739
SSDEEP

384:IZVtaijEaQqzcDx8rkqx8F3K+1J0PfnXnL:IZHRuqzcg8F7y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659dcf233895105a6ee3252000fb8de5

Files

659dcf233895105a6ee3252000fb8de5
.exe windows:4 windows x86 arch:x86

679a6e30359bb91a7ae1233ba81e558e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetConsoleCP
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
SetConsoleCP
SetConsoleOutputCP

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__p___argc
__p___wargv
__stdio_common_vfprintf
__stdio_common_vsprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
_strdup
_wtoi
exit
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE