a351478cb6d54765edc671b4473dc67e7b0f76e47f3669d37b997a60605f65ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a351478cb6d54765edc671b4473dc67e7b0f76e47f3669d37b997a60605f65ed
Size

119KB
MD5

a84eedd0e1a95cb8aad5fbee8dbd0cc6
SHA1

7224596b8cc12ca035562d4dd5a6ef76ec8fd2f8
SHA256

a351478cb6d54765edc671b4473dc67e7b0f76e47f3669d37b997a60605f65ed
SHA512

6e065ecaba1e3760179a52daa378d11f5f1cb053a7c916062a04dc17a2c8ef2d409f8371aa1fd5a150b540f7e65963d8b7cd611188bfbe0eb3951a2e8a37f59f
SSDEEP

3072:mMufvvFFv0FI4AkdDqlrJu7R1xfuX9MvLbzOHa:mF1S8u7NO9CL26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a351478cb6d54765edc671b4473dc67e7b0f76e47f3669d37b997a60605f65ed

Files

a351478cb6d54765edc671b4473dc67e7b0f76e47f3669d37b997a60605f65ed
.exe windows:4 windows x86 arch:x86

59a0ce069928afcd081430c1c66b826d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ProcessIdToSessionId
GetConsoleSelectionInfo
VerifyVersionInfoW
WerUnregisterAdditionalProcess
IsDebuggerPresent
GetNumaNodeProcessorMaskEx
GetVersion
DnsHostnameToComputerNameExW
BuildCommDCBAndTimeoutsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE