c57bf4b8297a75ef1c16cc8f678398db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c57bf4b8297a75ef1c16cc8f678398db
Size

76KB
MD5

c57bf4b8297a75ef1c16cc8f678398db
SHA1

f912ed77b1b76934c2335a028ff093953fcf1395
SHA256

2d34629ce5d98b8e4f5bba7d4fd7c256d0f74f0faf21e9b927fa181d63e25d9b
SHA512

4fbf0b20a6041b1076022e08508bbb9c21d8abf6cc9e9455394bdf9cd025c6e54fe51d262dcd0eadc03731614bdf7aa1c5039d89cac99fb388e037df892cc33d
SSDEEP

1536:P4W4W4W4W4tuvtOcQw1/Ouq+owRK/lIvHUK2arXHkpjVrs2ryrd1vUQuq6:P4W4W4W4W4tuvtOcWL+t4NnkXkHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c57bf4b8297a75ef1c16cc8f678398db

Files

c57bf4b8297a75ef1c16cc8f678398db
.exe windows:4 windows x86 arch:x86

d747bf4d2bec1e966f4f3a7f799c3f1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiberEx
LoadLibraryA
EnumUILanguagesW
GetTempFileNameW
GetProcessVersion
RegisterConsoleIME
GetCommTimeouts
ReadConsoleInputExA
CreateToolhelp32Snapshot
TermsrvAppInstallMode
GetCommTimeouts

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE