ff646288c343db79b632ed0538136e517ac1f1674c853abd0b24125e1db60cf5 | Triage

Sharing

General

Target

ff646288c343db79b632ed0538136e517ac1f1674c853abd0b24125e1db60cf5
Size

119KB
MD5

936fc10858740e82d5bceb71612f7d48
SHA1

fd2a37182be9f9a2ffb193fed9bd8053bba5c99b
SHA256

ff646288c343db79b632ed0538136e517ac1f1674c853abd0b24125e1db60cf5
SHA512

4da10beaed93f7f3c02f6b55dc14a30c5148c6476df0a0700c4f652b3c9dc319209be35f3ec817db1fff110dbeedcca2f4279b835cbc19130ca6211d16ea3933
SSDEEP

3072:BHUu3tmQ8o2+rGmXuV8QdW1piVRWA/Q+a0zFE0c+RGG2E0h:Nr2C3uWQs1GY+aJ0hR7Eh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff646288c343db79b632ed0538136e517ac1f1674c853abd0b24125e1db60cf5

Files

ff646288c343db79b632ed0538136e517ac1f1674c853abd0b24125e1db60cf5
.exe windows:4 windows x86 arch:x86

2d026d8b294c31298460ae71a1866786

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZRead
GetNumaNodeNumberFromHandle
VerifyScripts
DefineDosDeviceW
SetConsoleDisplayMode
GetThreadContext
GetConsoleAliasesLengthW
SetConsoleTitleW
CreateMutexExW
LocalAlloc
GlobalFlags

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE