96c49267b75ed2b1670f9aed723fadf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96c49267b75ed2b1670f9aed723fadf5
Size

96KB
MD5

96c49267b75ed2b1670f9aed723fadf5
SHA1

a6f644b95ba756743ce137c878d6550cfbac2b2a
SHA256

8e9cab8648e8d0e82eda318675bdc757e8c1f1c52f4c83cce09935b671bb3f34
SHA512

a84c29fb3d108be51a814257651975c263e7abff42557a63c1d0513dbf3be78ac9d37051736cc5112f36b46d86ea4fceff0d1958db507f00aef07f50945e929f
SSDEEP

1536:g1YMxDhpywu22PTv5tfUVaCJFAlS2zSx6Kn:1sBpmrEV7AZzA6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96c49267b75ed2b1670f9aed723fadf5

Files

96c49267b75ed2b1670f9aed723fadf5
.exe windows:5 windows x86 arch:x86

b650d69ba2eb49af97c57821cf08461b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ