990b22a69fc29d514c2d489915b54e67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

990b22a69fc29d514c2d489915b54e67
Size

68KB
MD5

990b22a69fc29d514c2d489915b54e67
SHA1

761a276c540f569cd48433ddbacd60547a6a06e2
SHA256

def7069fade5fb92c472885fe256df80193f578cb082137d5164f6bcf50468aa
SHA512

e737feb38149df5b61f3ff4ed20ae1017b6fdbdf0936ef3749d0bad5e0bb61e1893251a9b7bfc91446453312f8fc0d1e89ce7d36b9d64480ebda4f8777091c2e
SSDEEP

1536:VL/jueXB1QNJSBmo8BRsmD4vyLTAlNVPPQkMQ9R3d:F/juyI/eLFPPQkbvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990b22a69fc29d514c2d489915b54e67

Files

990b22a69fc29d514c2d489915b54e67
.exe windows:5 windows x86 arch:x86

b650d69ba2eb49af97c57821cf08461b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DITAA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ