891930af97234abdbe018cc46c562379 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

891930af97234abdbe018cc46c562379
Size

28KB
MD5

891930af97234abdbe018cc46c562379
SHA1

144dc493dd849f78a67b93c2471267810523e8a4
SHA256

6c0bf3322302ccfcf758dcb0fd90487ab6ac0b5f7735fdd7532887be01342451
SHA512

766082d8934e1547f8e264d482c065d04e219eeb05537f2ee764907f2a5dc1c32060e54f8331afe1c3c4da6395c26ee4df7163b078ef06c6a53188212da5ab57
SSDEEP

384:SN7wl05T9vzxtiJ9obpW6NRYQNeJzVoIMI1yRQKpg4ZO3C7EYlrSVUGdkVFveJCU:zlC/uONaJBoI7GHwpYlrOLCeJCIAEtr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
891930af97234abdbe018cc46c562379

Files

891930af97234abdbe018cc46c562379
.exe windows:4 windows x86 arch:x86

a6c56857ef5f50cfdd6df63f89ace29b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameW
EnumDateFormatsExA
AddConsoleAliasW
lstrcatA

user32

GetKeyNameTextW
AppendMenuA
GetKeyNameTextW

gdi32

CreateFontIndirectExA
GetCharWidth32A
EnumFontFamiliesExA
CreateEnhMetaFileW

Sections

.text
Size: - Virtual size: 123KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 433B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE