c51f66d979bbabdb25d77113ffb295b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c51f66d979bbabdb25d77113ffb295b8
Size

77KB
MD5

c51f66d979bbabdb25d77113ffb295b8
SHA1

87a48e98d4fe68d25fd5e709395b053db8259ad4
SHA256

88f580576124589f998cb099a2436f0d75f1c3e64ca05d649226f4c19167cdb8
SHA512

48477e332ffec1b5ca7fef40990587c1e3a4d108f475083eb8914f41503ed8430a57f164e46bde54e1368a166000d0830722e67d8752492b6386aa58bb403375
SSDEEP

1536:slaFjHQWwtQeV7VVCcT14YOgg8p6twWis7zp/yVdfvwwXHMjS6kX:njwbQeVhEcTmYOgxpjFs5/ydDsjVkX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c51f66d979bbabdb25d77113ffb295b8

Files

c51f66d979bbabdb25d77113ffb295b8
.exe windows:4 windows x86 arch:x86

15f52aab428a3e4429388533cde5ae74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
OpenFileMappingA
VirtualProtectEx
ExitProcess

user32

CharUpperA
CheckMenuItem
EmptyClipboard
DeferWindowPos

Exports

Exports

Xymxnwyc
CreateQvuybcjhv
AddKlivcfwfqxl
WriteTxcusixpwc

Sections

.itext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lmi2l1
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lmi1l1
Size: 69KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ