d34b6eff50b2196b6e2c635a5e5b083e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d34b6eff50b2196b6e2c635a5e5b083e
Size

6KB
MD5

d34b6eff50b2196b6e2c635a5e5b083e
SHA1

91a64832a1f10d744445c15f07e2650275160990
SHA256

f962dd3d3ea97d181255cf06d513049e1c17f9489cab0d21c2350cfaa4c2b331
SHA512

a82e14f98b9c43c4790bf5acaf1ae0965dce0ba3dc303f5fa6e231feb5733eb576de934fb396bd0f219af89625df3caf5b99794d30685e379aa88df41987ff18
SSDEEP

96:KQ+0kS9LOusCbSpIaLHFdXv9BVOYB5yEXWIJ2o6iQp8:K6LOubuRdlBH7xXNJP6Np8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d34b6eff50b2196b6e2c635a5e5b083e

Files

d34b6eff50b2196b6e2c635a5e5b083e
.exe windows:4 windows x86 arch:x86

148bf55ceb3e5471ef5f9ffc2bb75e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.geww0
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.geww
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE