b59a80165f41d2b91fa8fd4bcf961e18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59a80165f41d2b91fa8fd4bcf961e18
Size

55KB
MD5

b59a80165f41d2b91fa8fd4bcf961e18
SHA1

abcd1022ce6edecb12400bc658e9998dd5893ce3
SHA256

5869ce79801371ecbc7baa48b1862cb583b892bfd6be96756520473a30bff5c2
SHA512

8443a4998847a0c25366f4cd302740d5011106b4799086ea135c880b12aa85f786c19f2d2f42d9d7d7856e0f4bb7b1a77dfd5b6a8518e71226e99f728085e14e
SSDEEP

768:Z/h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQf2StVDClMe:VZ/nEkh8OTKNJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59a80165f41d2b91fa8fd4bcf961e18

Files

b59a80165f41d2b91fa8fd4bcf961e18
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.FUCK
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r2rc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ