c51487d38af6bdd30e26e02f01b1a5c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c51487d38af6bdd30e26e02f01b1a5c8
Size

83KB
MD5

c51487d38af6bdd30e26e02f01b1a5c8
SHA1

37e2403e21cd54ad9628329fcf22d46c0718b276
SHA256

23f2a11c2d87f9a19b9ded4a71d6d6024ba26a452fc53c5f60bb3353f90ac669
SHA512

dc5ee56656e4754ce69b9ea813329b9a8ee7f4790b128484e5a2af3f96099af437664a846b5a7f10b4d829fcb3d090f840e598310a5f5c4c25897b699b91453d
SSDEEP

1536:9111IfIOjWh0nSyz4hev/vTRFesZGN2TWL6QCtJKl4wvvpjVrs2ryrd1vUQuqwcW:Hy71FXGN2TWL6304gHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c51487d38af6bdd30e26e02f01b1a5c8

Files

c51487d38af6bdd30e26e02f01b1a5c8
.exe windows:4 windows x86 arch:x86

dd7bc4901354a2d21955920d2ddcbf07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
GetConsoleKeyboardLayoutNameW
FindAtomW
DeleteVolumeMountPointA
UpdateResourceW
GetLargestConsoleWindowSize
Heap32ListNext
CompareStringW
GetDefaultCommConfigA
GetLargestConsoleWindowSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE