b92468d7e69ca3f001fa90d214782b88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b92468d7e69ca3f001fa90d214782b88
Size

76KB
MD5

b92468d7e69ca3f001fa90d214782b88
SHA1

0a551493793b2df6d8089e0d8565936ec238c880
SHA256

90e7355b2364e69d1ead40c2bd8273acdf0b8580c2cc7a75b41ce0795aa228e0
SHA512

d0c12feef5a11d1bb616b208bb4861e4cad9853cbaa0108535f4df939e6f8f7f3d8fd767ae4b71585e7ae81e14546fc1c1186c76f30c6b1bc34b6c3b24506b3b
SSDEEP

1536:fKJqjKkGxUbexc4M7hWtS2frQMrB+snyURMBwpjVrs2ryrd1vUQuq6:fKMjlGxbc4M7hwS8RAiHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92468d7e69ca3f001fa90d214782b88

Files

b92468d7e69ca3f001fa90d214782b88
.exe windows:4 windows x86 arch:x86

c4efef7922c81244349e4d9969370665

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GetSystemWindowsDirectoryA
FreeEnvironmentStringsW
RemoveDirectoryA
lstrcmp
PrivCopyFileExW
GetDriveTypeW
SetComputerNameExW
QueryActCtxW
GetDefaultCommConfigA
lstrcmp

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE