e097cde0f76df948f039584045acfa6bd7ef863141560815d12c3c6e6452dce4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e097cde0f76df948f039584045acfa6bd7ef863141560815d12c3c6e6452dce4
Size

38KB
MD5

2e936942613b9ef1a90b5216ef830fbf
SHA1

32c2ecf9703aec725034ab4a8a4c7b2944c1f0b7
SHA256

e097cde0f76df948f039584045acfa6bd7ef863141560815d12c3c6e6452dce4
SHA512

e0c456502fb397b212fd480cda44cb404bfde11e1392842d4b81059881e3db8f93d8b72bbdb7d35a95680f89ee91022b7662a1902dc6e21be86db0f3c4389e27
SSDEEP

768:tMs3yBEgMYosM5Ar/xY6Xc4FSimT3oDz/KVA5k1q:edB5bM5Ar/S6Xc4FnmT3oDz/KV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e097cde0f76df948f039584045acfa6bd7ef863141560815d12c3c6e6452dce4

Files

e097cde0f76df948f039584045acfa6bd7ef863141560815d12c3c6e6452dce4
.exe windows:6 windows x64 arch:x64

6787f57bc9873a02ce38d5daed45ad43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
GetStdHandle
WriteFile
ExitProcess
ReadFile
GetFileSizeEx
WaitForMultipleObjects
GetQueuedCompletionStatus
CreateFileW
PostQueuedCompletionStatus
Sleep
CloseHandle
GetSystemInfo
CreateThread
CreateIoCompletionPort
MoveFileW
FindFirstFileW
FindNextFileW
FindClose
GlobalAlloc
GlobalFree
GetDriveTypeW
HeapFree
LoadLibraryW
HeapAlloc
GetProcAddress
GetProcessHeap

mpr

WNetEnumResourceW
WNetOpenEnumW
WNetCloseEnum

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ