15da7d49de7db96bd16ad3e734513b2d4204b325b1583b5d10b5fa4bbc096bff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15da7d49de7db96bd16ad3e734513b2d4204b325b1583b5d10b5fa4bbc096bff
Size

63KB
MD5

058b47cb2b341df53f863b0c930b38f8
SHA1

6c4fe348367c8201852b4ee8ca74fa8b6b622cd9
SHA256

15da7d49de7db96bd16ad3e734513b2d4204b325b1583b5d10b5fa4bbc096bff
SHA512

b9de6266ec03ba633d425ce12505f98a2da4a127d91eaa4dacb94bf4d2eadd3e84c0b3e32f50adcf77ffe2d5c075f165b3537ce37efc13d797045c86c6057226
SSDEEP

1536:a3tikvQLJtN/DmegtVDsdlklNkCPO+qaK1CQ5eDG4Yk9UxAbz76gCFLDJcBmoS11:a3WyaJ1Ir7Ar7d2U8OiZ6gcEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15da7d49de7db96bd16ad3e734513b2d4204b325b1583b5d10b5fa4bbc096bff

Files

15da7d49de7db96bd16ad3e734513b2d4204b325b1583b5d10b5fa4bbc096bff
.exe windows:4 windows x86 arch:x86

91386c35dcb7d09f45a70968e143ab2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandleEx
OpenFileMappingA
K32EnumProcesses
RegisterConsoleOS2
ReleaseSRWLockShared
GetConsoleTitleW
CompareCalendarDates
K32GetModuleInformation
ShowConsoleCursor
CreateHardLinkA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE