b588bf876ae67cb90933a1bfbb2dd139 | Triage

Sharing

General

Target

b588bf876ae67cb90933a1bfbb2dd139
Size

56KB
MD5

b588bf876ae67cb90933a1bfbb2dd139
SHA1

ac63091182d0fab86c55b2182addd9e699f7ced9
SHA256

407e925765602aded6e8f8502eacdf581d3e21aa0ff2950ec47f3e76d9b6415f
SHA512

9d39e15249e6fe108f782ce7182a5ac8a2a37b60a801e5cf6f924367d947801edb6f6aac11248be4c7d02d663d34ba12bf861ddab30ea82870d17ba9bd860a77
SSDEEP

768:Ay6JBmMuUy5MkR+22m2pZzP/argzvv2JtAUslqi594323SPgs46r8tW0jp068cOA:A/5NwiUsPB3SPwalkasH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b588bf876ae67cb90933a1bfbb2dd139

Files

b588bf876ae67cb90933a1bfbb2dd139
.exe windows:4 windows x86 arch:x86

1de62f57d929de03d873cba2bb3a1c41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteVolumeMountPointA
EnumTimeFormatsW
MoveFileW
GetPrivateProfileStringW
QueryPerformanceCounter
EnumDateFormatsExA
SetEndOfFile
BeginUpdateResourceA
SetStdHandle
SetLocaleInfoA
DosPathToSessionPathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE