b781182212139f12ff6fcb7f1ebf90ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b781182212139f12ff6fcb7f1ebf90ef
Size

2.8MB
MD5

b781182212139f12ff6fcb7f1ebf90ef
SHA1

18e76ee7d2edd7661f6e94b82887b61a1dbad366
SHA256

2b312ba6bff8b93dd0968b54a6ac456174615155f09098c1f29891acb43852be
SHA512

095efd4a1558a58b8168ea1f4a6e6f059e1ff1fc1e3215f4be36f09f28d59abba485f8b738bcb8af98e8999b378dc8fa9ef80b691933ffa43c94d5065d854a8f
SSDEEP

49152:cxMMcvFoTcAFfSMbTdjplDBBKUaij+dd3kSGQD:SSogifnTdjpjcZefLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b781182212139f12ff6fcb7f1ebf90ef

Files

b781182212139f12ff6fcb7f1ebf90ef
.exe windows:4 windows x86 arch:x86

55441918e4175daa41864c86ab18ca79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileEx
DeleteTimerQueueEx
CreateTimerQueueTimer
UpdateResourceA
WriteFileEx
VirtualAlloc

user32

CreateDesktopA
ShowWindow

authz

AuthzInitializeContextFromAuthzContext

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 93KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ