ad9e57cbe9a651336ebf6056ba8f3f2039bc35be6506b9a56bdd2340b68d7a48 | Triage

Sharing

General

Target

ad9e57cbe9a651336ebf6056ba8f3f2039bc35be6506b9a56bdd2340b68d7a48
Size

320KB
MD5

4145c957d503398ebcce80a68ed2a8b7
SHA1

79a00a5e1c3bed644095aef3b869d44a54d9b179
SHA256

ad9e57cbe9a651336ebf6056ba8f3f2039bc35be6506b9a56bdd2340b68d7a48
SHA512

e8541ce622d229d775a900767a57b17d8aa1d1d5d4b6881c9fccc7d3f69851096e136f9d8ff088244a7d8ca3bc1a941cfa2ce44e0bcc2c413b6ac3a248eb4c58
SSDEEP

6144:IqLAlzNx3lH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:X2V2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad9e57cbe9a651336ebf6056ba8f3f2039bc35be6506b9a56bdd2340b68d7a48

Files

ad9e57cbe9a651336ebf6056ba8f3f2039bc35be6506b9a56bdd2340b68d7a48
.exe windows:4 windows x86 arch:x86

04a8647fedf8d816c7fa4786a97bc12d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZStart
ConvertThreadToFiber
GetProcessVersion
FindFirstVolumeW
EnumerateLocalComputerNamesW
AddLocalAlternateComputerNameW
FlushConsoleInputBuffer
TransmitCommChar
Module32Next
LoadModule

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE