80549ed55c0ebfae2d1b4656f83e5f22 | Triage

Sharing

General

Target

80549ed55c0ebfae2d1b4656f83e5f22
Size

87KB
MD5

80549ed55c0ebfae2d1b4656f83e5f22
SHA1

fa7d3b31fb849c12088791705c10928b855a1812
SHA256

a6d214f64143ca89b50fbafa0ea3e1a952b9e256066637aa3c9640cd9fdac0cd
SHA512

f98e7df6307504287f7c12511e11b9220164a3a1dbc86662a65256c313b9e81bfc2d4be86acf17e5f2c7ad90a6f3d6e64ef871202e31b880d53203446a1ba43e
SSDEEP

1536:UhJcTubgNuZVixLkbp2zRYk0/MyUID7kQ77f9EeYdENURRb3+uR766STJycOBrc:UhJcTubgNuZVixLkp2zRdBpwL+Wa3z6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80549ed55c0ebfae2d1b4656f83e5f22

Files

80549ed55c0ebfae2d1b4656f83e5f22
.exe windows:4 windows x86 arch:x86

f7eea34a85c9b856934394ac11110dec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCommandLineA
GetModuleHandleA
ExitProcess
GetConsoleCursorInfo
Heap32ListFirst
GetLastError

advapi32

OpenProcessToken

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ecode
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.isec
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text000
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ