885186e0a72510f6888e8ca1780f3c5d | Triage

Sharing

General

Target

885186e0a72510f6888e8ca1780f3c5d
Size

114KB
MD5

885186e0a72510f6888e8ca1780f3c5d
SHA1

57dc5452bd6fdc67e8177a92c8cf6b39722d32a6
SHA256

644ba316e402faf534a3feb88d6da4ab3299dd337d961fe961f0e89c608e0362
SHA512

d2da6a6f8a09367e9b08f186ca8546c19a676938951df9ef79663d135cc425b6d2d8295cdd38a7603e426958320836258a6fc28cdad5868756b8d4ed02f60cd4
SSDEEP

1536:TeqejnOkp/2d3C24gJdJp+c2vOUHkrxbBgJiKLDVOpJrnzqYoEZnx3kWGM3SnC6D:TnejnOk/OPpeOUHygBUvZ6WPkVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
885186e0a72510f6888e8ca1780f3c5d

Files

885186e0a72510f6888e8ca1780f3c5d
.exe windows:5 windows x86 arch:x86

dd033e5200ba9ebdeb1c856d589cff7d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetEnvironmentStringsW
IsDebuggerPresent
GetEnvironmentStrings
GetTickCount
CreateEventA
GetPriorityClass
GetStdHandle
GetCurrentThread
GetVersionExA
GetCommandLineA
GetProcAddress
GetModuleHandleA
CreateSemaphoreA
CreateMutexA
GetCurrentProcessId
GetStartupInfoW
GetModuleHandleW

crypt32

CryptMsgClose

rtm

RtmFindNextHop

msvcrt

_except_handler3
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ