b963f2886eb58320025fcf7c11f9f4b9 | Triage

Sharing

General

Target

b963f2886eb58320025fcf7c11f9f4b9
Size

194KB
MD5

b963f2886eb58320025fcf7c11f9f4b9
SHA1

9018c1fb13a43986e1974ab36873d192d59031bf
SHA256

d642999e476e4d272adeb323b6cbb3b6d597799cf32618df2923990c3f9ddd8b
SHA512

49abc497458ad30d1230f68be5b74fc06fcf6fd5c1e298f92f913477e6dd29269fc47873f9524adda827259da77376fc1f6a29a4043a9ca9423417add1af1dc0
SSDEEP

3072:6aC/NEsdpPeZGLqnmM+OoXGRujp/LmnZ1sUt2GQm0tCxPsz1gtwLqFC6cgFjJD1L:xOisH1Onm4oXwIWw9Vgy2wL7gbJuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b963f2886eb58320025fcf7c11f9f4b9

Files

b963f2886eb58320025fcf7c11f9f4b9
.exe windows:4 windows x86 arch:x86

740548bb9bb37ba71969fb593395def8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

kernel32

DeleteCriticalSection
SetProcessPriorityBoost
CreateProcessW
Sleep
GlobalLock
CreateEventW
EnumResourceTypesA
InterlockedDecrement
CreateFileW
GlobalAlloc
GetModuleFileNameW
WriteFile
ReadFile
GetModuleHandleW
TerminateThread
GlobalUnlock

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ