c924ea1a341ae6f1b2684e17c470dbb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c924ea1a341ae6f1b2684e17c470dbb6
Size

80KB
MD5

c924ea1a341ae6f1b2684e17c470dbb6
SHA1

9cce16b2085d2254e4904be2faa1111a43964ec9
SHA256

5c778e6d75f83f2424c8e928ab4f6e6218ec9b35f12b92588cfbe256c9d5cf4f
SHA512

4d971aac9ba41ef70e6210a5c6d6a10ae6c4f75e2f6224a6e880e9419a55e03249ab4167964cd6339f5cf19725c25ee1ca52a714b73f5e61129d4421697ec9da
SSDEEP

1536:LX2wQ+n7VWUYogALN9oNaSSjh4iGoZmkx+CoQHUfKzGBC/mZ4X:LO+n7V5gA52aSCKho5x+CorKig/mZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c924ea1a341ae6f1b2684e17c470dbb6

Files

c924ea1a341ae6f1b2684e17c470dbb6
.exe windows:4 windows x86 arch:x86

774c0a61dd31baba6e0fb4a5b36eb8c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessIoCounters
PulseEvent
IsValidLocale
GetVDMCurrentDirectories
GetVersionExA
GetPriorityClass
GetLastError
GetTapeStatus
ChangeTimerQueueTimer
PeekConsoleInputA
CreateNamedPipeA
GetConsoleAliasesLengthA
ReadConsoleOutputCharacterA
GetLocaleInfoA
CreateFileA
GetDiskFreeSpaceA
GetExitCodeThread
SetFileTime
ReadConsoleInputA
WriteConsoleOutputA
RtlMoveMemory
LockFile
VirtualAlloc
DeviceIoControl
SetCurrentDirectoryA

advapi32

CredFree
CredMarshalCredentialW

dpmodemx

SPInit

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ