680c16213122ed82d7b3a9628b13f10b | Triage

Sharing

General

Target

680c16213122ed82d7b3a9628b13f10b
Size

83KB
MD5

680c16213122ed82d7b3a9628b13f10b
SHA1

32e94c5004c344099ce375ff648d0f459e409396
SHA256

fdaacbaa3a05633e8a55f37f81f83d989b144c39343b1d4d8e717ba2fcaab0a5
SHA512

a05b4e21f2d7ee036d9e9f3160456acddc56befa413451447b5c882fa9bbe36882664ce419d7418f75eec7d713477e1e45862426855b91b76b9068cfec5320d3
SSDEEP

1536:Ej138k8Hogv0qn5jFACz0bHl7Zd3cNDVwLQM1Kwp+IDjEErxTWDTMqhGKYIZTETr:qsk8HogVjyCz0JZd3WVwL31KwNDjBkMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
680c16213122ed82d7b3a9628b13f10b

Files

680c16213122ed82d7b3a9628b13f10b
.exe windows:4 windows x86 arch:x86

ff1776edfa176288afdb924148804dc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalExit
GetLogicalProcessorInformation
GetEnvironmentStringsW
GetConsoleCommandHistoryA
DeleteFileA
LocalShrink
EndUpdateResourceA
GetDiskFreeSpaceExW
ExpungeConsoleCommandHistoryW
NlsGetCacheUpdateCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE