659fe2099bee3f61d222a8213ebea8fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659fe2099bee3f61d222a8213ebea8fe
Size

192KB
MD5

659fe2099bee3f61d222a8213ebea8fe
SHA1

8758e7d2511c1369a0fa576fda6cddcc6b9debca
SHA256

e91342d600842e128b78cce016db8f19b41933b3b28d539b0af3dbd9bd0c4ea1
SHA512

437ca222b1a3e346f1dbf0a38267ef55c1999c0c5e2b938941191d90e7a50091051174218780e29cc967cbf295cf8c1e1494cb0f040742d57e8c03cbf1988631
SSDEEP

3072:ey7em1RyXultjsvyxUMmeG0NZRnruy3f8o8Emz6IgrG:eHGrqyxyKXNrucf8lEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659fe2099bee3f61d222a8213ebea8fe

Files

659fe2099bee3f61d222a8213ebea8fe
.exe windows:5 windows x86 arch:x86

155c255322061a895e96b178d3a12ae9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
CharNextA
GetDC
GetSystemMetrics

kernel32

GetLastError
GetVersion
IsDebuggerPresent
GetACP
GetCurrentThread
lstrlenA
GetCurrentProcessId
GetProcessHeap
GetCurrentThreadId
DeleteFileA
GetDriveTypeA
GetModuleHandleA
LoadLibraryW
GetOEMCP
QueryPerformanceCounter
GetCurrentProcess
GetStartupInfoA
GetConsoleOutputCP
DeleteFileW
GlobalFindAtomA
GlobalFindAtomW
SetCurrentDirectoryA
lstrlenW
GetModuleHandleW
lstrcmpA
GetUserDefaultLangID
GetCommandLineA
SetLastError
GetTickCount
MulDiv
GetThreadLocale
CopyFileA
GetWindowsDirectoryA
VirtualAlloc
lstrcmpiA
lstrcmpiW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ