75588051288d2077dfaaf5f9b9740bc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75588051288d2077dfaaf5f9b9740bc1
Size

83KB
MD5

75588051288d2077dfaaf5f9b9740bc1
SHA1

5e58bb07f3c46d2d22d5d92ef41619b6dd30811a
SHA256

0ec7d069ab2861e002c38c3cccf39e0f1afca87b02f28c54888b2b0a09aab11c
SHA512

523cd5c052ec0e276ed080ff7ca3317f51932783b24940c9eb0a34763e86540247cbb71b97a2cd73ddb6cf89889b887576cb366d3095fab850af0fab434f5c5c
SSDEEP

1536:hGrvaAlFXimTHZMonvhnVkp7uSujOejEErxTWDTMqhGKYIZTET8bDQ:sTaAlFXpH9Vkp3DejBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75588051288d2077dfaaf5f9b9740bc1

Files

75588051288d2077dfaaf5f9b9740bc1
.exe windows:4 windows x86 arch:x86

4be5e8b2d73d19047111cbe57f231daf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
RegisterConsoleVDM
LockResource
SetFileApisToOEM
GetLogicalDriveStringsA
GetProfileIntW
DeleteCriticalSection
GetProcessPriorityBoost
SetEnvironmentVariableA
SetProcessAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE