c80e4f342ce8d6b58d71d406d9191662 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c80e4f342ce8d6b58d71d406d9191662
Size

4.4MB
MD5

c80e4f342ce8d6b58d71d406d9191662
SHA1

19fc03868f9222992c4079073a139e91c3f7d8cf
SHA256

b647f6f6a33229e3291b3336c0b428baa20158079f4fe0f23eb1a83cf1ca67c8
SHA512

1ade92750b974b9072ed6fa09b23ba2cdb2c43870abf1c842fff25fc18739eadb1efb59c94cc3a5ce5862d2a1daab372fbb86eb92489b8b4193058702adde817
SSDEEP

98304:ZzUQpXApxWTdQIQZvfbgCe+7Kh0eAVIcMDEy3x6f0:JUIXeA6IQpbde+7KOEDEy3U8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c80e4f342ce8d6b58d71d406d9191662

Files

c80e4f342ce8d6b58d71d406d9191662
.exe windows:4 windows x86 arch:x86

400c1c271a89914450b1b94491ba39b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFileEx
CreateTimerQueueTimer
DeleteTimerQueueEx
GetDiskFreeSpaceExA
ReadFileEx
VirtualAlloc

user32

ShowWindow
DialogBoxIndirectParamA

authz

AuthzInitializeContextFromAuthzContext

Sections

.text
Size: 794KB - Virtual size: 794KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 98KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ