901348e046d78de6aba637c43897e8e2 | Triage

Sharing

General

Target

901348e046d78de6aba637c43897e8e2
Size

68KB
MD5

901348e046d78de6aba637c43897e8e2
SHA1

9c7f93bcb4a4cce846e42bfebf5f1b3d72937e37
SHA256

7843a951d4921d34ac8f6006b4287af4e4d9953792536f56cb584d11f4939742
SHA512

e7d88199ec865a094026c5bdc1a3427f8d27b063c5974f231c5df28d6ed35f88b24d0c82a5babc591d51a726c301d2724d683ea412363cfd587b0c24c74fab79
SSDEEP

1536:iSSlkeXTmyXqjYiKnlR2wmnLyO7+o31WkMh8NxA:A+OTmSMQR8L78xAxA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
901348e046d78de6aba637c43897e8e2

Files

901348e046d78de6aba637c43897e8e2
.exe .ps1 windows:5 windows x86 arch:x86 polyglot

d98a850fb544c36d9c7c663bd0dae58f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetSystemTimeAsFileTime
ExitProcess
FormatMessageA
Sleep
GetTickCount
GetModuleHandleA
GetCurrentThreadId
GetLastError
GetCommandLineA
FatalAppExitA
GetConsoleAliasA
ReadProcessMemory
FoldStringW
InitAtomTable

ulib

?AppendBase@PATH@@QAEEPBVWSTRING@@E@Z
?Put@LIST@@UAEEPAVOBJECT@@@Z
??0REST_OF_LINE_ARGUMENT@@QAE@XZ
?SetAnsiConversions@WSTRING@@SGXXZ
?NewBuf@BDSTRING@@UAEEK@Z
?SetXon@COMM_DEVICE@@QAEEE@Z
?Stricmp@WSTRING@@QBEJPBV1@K@Z
??0FSTRING@@QAE@XZ
?Strcat@WSTRING@@QAEEPBV1@@Z
?Strcmpis@MBSTR@@SGHPAD0@Z
?GetWSTR@WSTRING@@QBEPBGXZ
??_7BSTRING@@6B@
??0DSTRING@@QAE@XZ
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?QueryPath@PATH@@QBEPAV1@XZ
??0DSTRING@@QAE@ABV0@@Z

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ