c6047628fbd1e95b0a5667398f19c5c5 | Triage

Sharing

General

Target

c6047628fbd1e95b0a5667398f19c5c5
Size

757KB
MD5

c6047628fbd1e95b0a5667398f19c5c5
SHA1

19ad326b1d6523e59fb800928f7eb7e6a53bc09f
SHA256

51dc11eb44eb338cc63fa03cbb269ffd6d16c231ca5912413b7ec8eb65d2f3af
SHA512

7f71aa103c5601374a135273477570d8035e0ba712edfe281a316e4726639ba4d2e76912e077601b947c9bfaf541d56b2781e786f866131901c6c7ed0f09765e
SSDEEP

12288:LD7A/XB6SluPvnhJyjoQL6OKz8p9xW+0NUZRV7jAySbXKPP/eTqwpS9Ka7Fhyy:vE/X5lKvjqWLAp/B0OVJKQP/vwp07Pyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/avalon3.exe

Files

c6047628fbd1e95b0a5667398f19c5c5
.rar
avalon3.exe
.exe windows:4 windows x86 arch:x86

925d185b506481b0872d6db9a2c72e44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SuspendThread
GetCommandLineA
GetEnvironmentVariableA
EnumResourceTypesW
DeleteFileA
Sleep
HeapCreate
lstrlenW
WriteConsoleA
GetModuleHandleA
GetCommandLineA
OpenEventA
CloseHandle
SetLastError
CreateSemaphoreA
FileTimeToSystemTime
HeapDestroy
FindClose
CloseHandle

user32

GetClipCursor
GetClassInfoA
DispatchMessageA
DrawTextW
GetWindowLongA
FindWindowA
PeekMessageA
CreateIcon
GetKeyState
DispatchMessageA
CallWindowProcW
IsZoomed
GetSysColor

dmband

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 806KB - Virtual size: 806KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ