678fb7d5d115a8eb18b33d5ab7c1e231 | Triage

Sharing

General

Target

678fb7d5d115a8eb18b33d5ab7c1e231
Size

83KB
MD5

678fb7d5d115a8eb18b33d5ab7c1e231
SHA1

b027f3f795d2126f7803383800d160f14e7d1ba6
SHA256

63ff5e212b04a1cdbbd6c455f36ccc9a726a4613f4cc35386e5a1eb07b937045
SHA512

172653a660e743456181dca97b53e94729ca74706977d871c0d441a073b92794cfe7936fafe65011c4cbd29760144582ef97ebef006cab1cdb2d5258225aca2c
SSDEEP

1536:N5MzNgm9EGwn8Kf24NUWd1sYhzuxiHFyowtKKMjEErxTWDTMqhGKYIZTET8bDQ:DMJgmifO701sYZuA4KbjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
678fb7d5d115a8eb18b33d5ab7c1e231

Files

678fb7d5d115a8eb18b33d5ab7c1e231
.exe windows:4 windows x86 arch:x86

6e3e76cc999524fbf345b23848f5980b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthA
GetTempFileNameA
GetDevicePowerState
Heap32First
UnregisterWaitEx
GetPrivateProfileStructW
GetPrivateProfileStringW
WinExec
QueueUserWorkItem
GetDefaultSortkeySize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE