b564a3961ccab23a2bb432725e925cba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b564a3961ccab23a2bb432725e925cba
Size

23KB
MD5

b564a3961ccab23a2bb432725e925cba
SHA1

f256be4a125c3ab75eae88b85c532cd5b553a87e
SHA256

c58d43b7e0dd0cfb5707ac6d6248b64a8b835145734cd73e2448d7b2b40be636
SHA512

1018fee0b21d798e0a288c3af77a46636bf3f4b5cd35304324b286c14ad2ba21b53699e1f61deda1c869e484a0217ff22ea5e0f88fb0113e601b83f8ec94629f
SSDEEP

384:+2iMNHApXzjESk4LIPoU66Btg6cUAQniLN1snFZnp67l:PHApjISk4sPPDgGnO1snF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b564a3961ccab23a2bb432725e925cba

Files

b564a3961ccab23a2bb432725e925cba
.exe windows:4 windows x86 arch:x86

5ac431ec6f6f6724d5e62ba3135db190

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
GetDiskFreeSpaceExA
DeviceIoControl
SignalObjectAndWait
EnumResourceNamesA
TlsFree
BindIoCompletionCallback
GetConsoleKeyboardLayoutNameW
WaitCommEvent
GetCommTimeouts
GetCPInfoExW
GetOEMCP
UnhandledExceptionFilter
EnumDateFormatsExW
ExitProcess
SetCommState
GetProcessVersion

Sections

code
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ