979141004c31765993568f3c3753e5ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

979141004c31765993568f3c3753e5ac
Size

76KB
MD5

979141004c31765993568f3c3753e5ac
SHA1

0e4de2f8893ef8dcd76db0f142cf38f5b6d0a75e
SHA256

b26086e3e398eb106d7a26a9ee10d3e2587ec067e00f3bf3fff392fa0396d088
SHA512

696ca2953836f6fbfd6adb2782af356e48347ec8e4806c6f6592fcbe60882fabe0b7e9640cdc0f06da0aa4f4cb1a2f3870450160263608ea27bb099bb9dbd824
SSDEEP

1536:YC83ZGZpl9rql57bKJ+UjbUJ8UrUhqsS6XuZJ0npjVrs2ryrd1vUQuq6:PHl8l57bE+JZUhXZI2Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
979141004c31765993568f3c3753e5ac

Files

979141004c31765993568f3c3753e5ac
.exe windows:4 windows x86 arch:x86

fee50bb55a82b1f47ee9975159e8a2ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetSystemWindowsDirectoryA
CreateFiber
VerLanguageNameW
SetCriticalSectionSpinCount
GetNextVDMCommand
GetNumaNodeProcessorMask
GetPrivateProfileIntW
NumaVirtualQueryNode
LZDone

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE