0532e8e1dd4346f96e47d261011de5fce07d03edb87ab1bb60a02332c8a74217 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0532e8e1dd4346f96e47d261011de5fce07d03edb87ab1bb60a02332c8a74217
Size

76KB
MD5

f7da0bfa15f61d0c8cb0691342db21fb
SHA1

d475367152b4ba04cd242de035123d782c6c3a22
SHA256

0532e8e1dd4346f96e47d261011de5fce07d03edb87ab1bb60a02332c8a74217
SHA512

ff5522fa19b019ab01978a08ee42db567afa24594c2060a6f0f64d034564d1869e28896d39c768caf45d1fa20b0488929321eb0ee5b83c200776e50d32f88e7c
SSDEEP

1536:z1111ugdzLvH3JqdLaPKrVCnXgPgi/uYZ/5kt9ipjVrs2ryrd1vUQuq6:d/vH3JSaPzgRX5kKHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0532e8e1dd4346f96e47d261011de5fce07d03edb87ab1bb60a02332c8a74217

Files

0532e8e1dd4346f96e47d261011de5fce07d03edb87ab1bb60a02332c8a74217
.exe windows:4 windows x86 arch:x86

7d7983b54d36c26d0001c02230cfca67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
SetLocalPrimaryComputerNameW
IsBadStringPtrA
ResetWriteWatch
QueryActCtxW
GetPrivateProfileSectionA
LZOpenFileW
FindFirstFileW
CreateTimerQueue
CreateHardLinkA
SetDefaultCommConfigW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE