96538447ceb2e6a872fa3d8e28a91a9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96538447ceb2e6a872fa3d8e28a91a9b
Size

83KB
MD5

96538447ceb2e6a872fa3d8e28a91a9b
SHA1

ce95961c6c5d387ccd6dabcae69bcacaff7258a3
SHA256

a8a51e5604796d44e88caff430c8feeb7c1d9e48ceb64ba2bce0bcad9d184e22
SHA512

c1c2d9395ebf1cdefcd8c3e36120481242610f64bb010b6ab1c8c607d21e6481b8012555f83b8e4913fca45841298abc0d1d0691aab5ba941b4e51133e30f354
SSDEEP

1536:pgX4HGwOo+FqUN7uJFrcoDPrHhUZ4zIUT8t8jEErxTWDTMqhGKYIZTET8bDQ:rHvGqUN7MFrc4ThUezwt8jBkMqhGKZTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96538447ceb2e6a872fa3d8e28a91a9b

Files

96538447ceb2e6a872fa3d8e28a91a9b
.exe windows:4 windows x86 arch:x86

8d6c7c37d246d9b541b6361c10074e39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GetCPInfoExA
UTRegister
GetConsoleCharType
CompareStringW
CreateMutexA
SetLocaleInfoA
GetShortPathNameW
FileTimeToDosDateTime
SetCommConfig
VirtualUnlock
LoadLibraryExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE