d431d8afbc3579960d3f08c629af2d0c | Triage

Sharing

General

Target

d431d8afbc3579960d3f08c629af2d0c
Size

96KB
MD5

d431d8afbc3579960d3f08c629af2d0c
SHA1

e44afabfbb0260d00551b85e802f917d51859bdf
SHA256

c6ecb261318120b636d659e7cbaa2cc16ae6dc46fe566e3f50f7050503a83e1a
SHA512

88f2f9c96b74d656e796e0bb868cf5e4b8759cd8b0a89fc263a5c19ec19380a4b8a58bca07ecac01afe87a26382ca596757e8aa0195f288898a0ff99afd0d480
SSDEEP

1536:eMz3dWeDVKIs79pmpbafDA3UjdSq6l+/lsPP2SjF2IkQvK54B8:e4dlIpU4k3UgIOeSRkQvK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d431d8afbc3579960d3f08c629af2d0c

Files

d431d8afbc3579960d3f08c629af2d0c
.exe windows:4 windows x86 arch:x86

935f4c35488b63cbb48795476419074a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
DeleteVolumeMountPointA
GetComputerNameA
SetStdHandle
GetProcessVersion
EnumCalendarInfoExA
CreateDirectoryA
CreateMutexA
WriteProfileStringA
LocalHandle
GetProcessVersion
GetCommandLineA
GetStartupInfoA
ExitProcess
SetCriticalSectionSpinCount
GlobalSize
GlobalFree
WritePrivateProfileStringA
GetFileSize
HeapReAlloc
GetCurrentProcessId
SetLocalTime
SetConsoleOutputCP
SetConsoleScreenBufferSize

Sections

.itext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ