d3547e067aff8bb2e3c250d9c541ea78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3547e067aff8bb2e3c250d9c541ea78
Size

115KB
MD5

d3547e067aff8bb2e3c250d9c541ea78
SHA1

da99d4061e078c35a26459db3971eb8ba6600277
SHA256

3e9135f33980783bf8e10faa339f9cfd84f4fb074c659b0883918bc4bf66e56f
SHA512

2d6d691e76b18beb48b3bd6127ec1dadb6d4e0d0f9595dc004630f9dfa74b92cc3dd176e307f8771c16f3090f768bf6ce429d894bb9764f857c89a6252401fc2
SSDEEP

1536:mK9/LUiakPTZT8KhoykOhWcggVEopCayG0atnBvDJmAA+I73dB3Y3UsLgQHAltso:n/bakiKCONvhpVvPvR8B3Y3eQHAQU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3547e067aff8bb2e3c250d9c541ea78

Files

d3547e067aff8bb2e3c250d9c541ea78
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE