b80029ac6d37fd0a73692212cdd26558 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b80029ac6d37fd0a73692212cdd26558
Size

67KB
MD5

b80029ac6d37fd0a73692212cdd26558
SHA1

2b09acaa6fa4e6a4802b85e154ce378ae667332a
SHA256

28aa3837aeada01d78611f9d152e6fb98034a26f42bbcb3ef51eab80d8a23701
SHA512

adeb085d2572600c92c2908448b42c9ccb753fa19e4c15e95c0b16d9a0fb3ebbf4a17ac0f4634da0f0aa515d9654e21fe37da72f7d3c929dcc0b9d88763f8a6e
SSDEEP

1536:ppTEiSAlx+NBLfrVcVsU53vWu+P+OCK2CtP706CQM/lwkBK:/TNSgEnGVJuu+AdCdQ6CQM/lwkBK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b80029ac6d37fd0a73692212cdd26558

Files

b80029ac6d37fd0a73692212cdd26558
.exe windows:4 windows x86 arch:x86

09dfbb65daec94143636119fc66dc3a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddConsoleAliasA
SetFileShortNameA
Toolhelp32ReadProcessMemory
GetCPInfoExW
SetConsoleTitleA
_llseek
EnumResourceNamesA
IsBadWritePtr
GetLogicalDrives
ReadConsoleOutputCharacterA
CreateEventW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE