a2677eb03312f52a2fa491cddb386332222183cd7c06d0fe3e662ea853c3a99b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2677eb03312f52a2fa491cddb386332222183cd7c06d0fe3e662ea853c3a99b
Size

119KB
MD5

bf060ff7109a04f91399a97a94ec4f9c
SHA1

56bad45c2f7ffa2b2ad0ad65f795e8e5e00284ce
SHA256

a2677eb03312f52a2fa491cddb386332222183cd7c06d0fe3e662ea853c3a99b
SHA512

97d6a6036f488764c57cde08e53b7b4fc46ecdc86ac4063f9debcebacf1b1a7db51e4cfcb3e574998f73a55885f5b5e46ff53fba4e3686942675b993bf3751fa
SSDEEP

3072:/wFU9mKt4QYAH4GSLBUAlO7B2ILJm5UjWDdXa+2XBl3vvhF5Zn2w:QUoKwz9hO7Lm54WDaX3Dn2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2677eb03312f52a2fa491cddb386332222183cd7c06d0fe3e662ea853c3a99b

Files

a2677eb03312f52a2fa491cddb386332222183cd7c06d0fe3e662ea853c3a99b
.exe windows:4 windows x86 arch:x86

36298b8ec484af154ca76dd3d88b40aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructA
AppXGetOSMaxVersionTested
SetEndOfFile
ReadConsoleOutputCharacterW
GetConsoleAliasW
RegGetKeySecurity
GetSystemWindowsDirectoryA
AddLocalAlternateComputerNameA
WriteConsoleInputVDMA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE