b754f6716751246716618124e9e64182 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b754f6716751246716618124e9e64182
Size

76KB
MD5

b754f6716751246716618124e9e64182
SHA1

1cdbffc0d2de657f2549989c93ea230609b4a888
SHA256

21b708f9df301b28f1ce80148a2e28e8fe9990525e2e87d1fec0f68e8c72c1fc
SHA512

be59d82ffe961b40cb296d4342227f74f83ea8a2e626655d39c2f37cf8515a4210119b77bb8422e893e2c1abb5a22be01461299f8c9af6d50012e5478b7f12aa
SSDEEP

1536:qnBcCLkTUuDmwvYAbnFp0xfT5gZ6jiqppjVrs2ryrd1vUQuq6:UOzT3Dbh4KZ65Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b754f6716751246716618124e9e64182

Files

b754f6716751246716618124e9e64182
.exe windows:4 windows x86 arch:x86

9f7c66195a87f70b5470f97bb7acac05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
VirtualLock
GetHandleInformation
SetProcessDEPPolicy
LZDone
GetStringTypeW
SetConsoleIcon
lstrcmpiA
TerminateThread
CompareStringA
GetConsoleHardwareState
GetProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE