686eb982dd5f5c06fbbbc6ef9b13b3fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

686eb982dd5f5c06fbbbc6ef9b13b3fd
Size

66KB
MD5

686eb982dd5f5c06fbbbc6ef9b13b3fd
SHA1

ae8dc215fd00e7ee22172e01c28515d2803ef72b
SHA256

51b67e5a74822082d8923567124eb7e50cf54165f48229278bd161a302e28967
SHA512

677e433d1212ef560c87db8f5ec4d65d41d674cd6576a27405d1972af2a85c4b6b14d5d6dd0ebbe3475281c31a6f6391c4ab779e9697799ab150792381d435bb
SSDEEP

1536:cCCPfQ3t5wIxm1f2fFU9VAg8/CR+jygPnbYo8qJxxVfBd:yPU8I6f2fWAn6cko8G1fL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
686eb982dd5f5c06fbbbc6ef9b13b3fd

Files

686eb982dd5f5c06fbbbc6ef9b13b3fd
.exe windows:4 windows x86 arch:x86

9dcd8b7ac955fb0f2dca85f869b660df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthW
ReadConsoleOutputA
GetCurrentProcess
WriteFile
CreateFileMappingW
FindFirstVolumeW
GetNumaAvailableMemoryNode
GetPrivateProfileStringW
GetTimeFormatA
CmdBatNotification

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE