c59e46ad99a7befeb0e21c2a1ec2cda9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c59e46ad99a7befeb0e21c2a1ec2cda9
Size

106KB
MD5

c59e46ad99a7befeb0e21c2a1ec2cda9
SHA1

2a7efe82b2390d7ae0d9a8f764edacacc8e7b8b7
SHA256

e0708ee7dc6637385036d07b636b45e698da13466835cdccfcd7e2220277b45e
SHA512

41e8bbeb8f0f56c78c71206008de9ba291d4e265f0705983fa4cb3fac58e37b352f7e1d3d7140344681f4c0ea55b37701b3ae245fe5042ed6403f7399d274ca3
SSDEEP

1536:1eSX/0XzsstMVLu/B3WX08UY+VV9XwHD5v9bqMvgZUCZ42b/KwBUEvS:BX/0XzsIAEWXSlsDJDgZUCZ4nwPvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c59e46ad99a7befeb0e21c2a1ec2cda9

Files

c59e46ad99a7befeb0e21c2a1ec2cda9
.exe windows:4 windows x86 arch:x86

764e46b4e886fb56ad221fd03be8b7a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdePostAdvise
CascadeWindows
ClientToScreen

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

Sections

.text
Size: 24KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE