c58d16810579d011c23057e8cf233951 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c58d16810579d011c23057e8cf233951
Size

1.7MB
MD5

c58d16810579d011c23057e8cf233951
SHA1

d599ec6d2f71e01344773d2b038e152bd68b36e9
SHA256

32e956cc6ab4a4533b126b256713d9c5416f47cdbb67e0b6399d00cae711829c
SHA512

4c5515f5b1725739f367e6b8fe04e776ea8e681e30e9c4e99534c6f0550f3a9d0b2e547574415d51040f80dfd84ae4bf60a474163cb72f58ebda6b05ad68a61b
SSDEEP

24576:Q54LaGb6F3uFjCm/Dk9jzhtPNnqFVIHMbTlsWMoJLK:A4LHb6F3uFjCEk9jzhtPNIV+MbTdJLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c58d16810579d011c23057e8cf233951

Files

c58d16810579d011c23057e8cf233951
.exe windows:4 windows x86 arch:x86

2a3f43a9557e189dde43e16a8ed2038a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
WriteFileEx
CreateTimerQueueTimer
DeleteTimerQueueEx
ReadFileEx
ReadConsoleA

user32

CloseDesktop
ShowWindow

authz

AuthzInitializeContextFromAuthzContext

Sections

.text
Size: 750KB - Virtual size: 750KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 93KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ