c605d21f239d6e6d073d5bf36aa5adf5 | Triage

Sharing

General

Target

c605d21f239d6e6d073d5bf36aa5adf5
Size

4KB
MD5

c605d21f239d6e6d073d5bf36aa5adf5
SHA1

9b97db9498e450908239ce2f95fcf3c9c9f3b8c0
SHA256

4e60c585c4edd6b65173c49824c3d87f20f54ec5dd3bbe9835885dbca1f57b59
SHA512

e780e56948995e97182019cb3cedc8927bb03c3d98cb27d818c0fe821d46ae0c0eb3d38d699ff559bf691a3abcb6e86b6760b053a628d0b71c6cef27371c9089
SSDEEP

48:Sy51neQKB27W4H+ZEwjyO7Rdk+J3GzXMlpQVn2KTuKMdHYlIZWmr20aX35WwG:L1ugbw2OFdk+JWTMkIKTueEWd0aXpWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c605d21f239d6e6d073d5bf36aa5adf5

Files

c605d21f239d6e6d073d5bf36aa5adf5
.exe windows:5 windows x86 arch:x86

4daa50fb1bfde898cf3800cd964c91dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_controlfp
_except_handler3
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
__set_app_type
_c_exit

kernel32

GetModuleHandleA
lstrcmpiA
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
lstrlenA
GetStartupInfoA

ole32

CoRegisterSurrogateEx
CoInitializeEx
CLSIDFromString
CoUninitialize

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ