b80587445d71218d053d5efeaf3eadf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b80587445d71218d053d5efeaf3eadf4
Size

17KB
MD5

b80587445d71218d053d5efeaf3eadf4
SHA1

bf1a2cbbbb11490541380e53f98c33c2c2b12f45
SHA256

e7391cdec9581c00bdbd449852385330f0cf8092a8683663ab3e6fb1cf177521
SHA512

933734bff58afdc5bc02b9b41b5033dc64ead35a6d8e495047814319b3a701bf52c1536fffee228eec7aab3cdb823c3610a6b7d74093d0aadd79d4053eb0d08b
SSDEEP

384:l+Eh3HoOO9KOpbA0EICjw7OLy0yUCSJl2Ia9t1LmvUxYowWzZFW9lObtMPPh36:z5IO++e7OLvyUzD2IaAvUxYowTPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b80587445d71218d053d5efeaf3eadf4

Files

b80587445d71218d053d5efeaf3eadf4
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ