918d399a14cb40ec537e6858aab220cc2f3074697bad469a7894a2b64b484a8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

918d399a14cb40ec537e6858aab220cc2f3074697bad469a7894a2b64b484a8b
Size

91KB
MD5

a371f0d3c013fc87e723d5259ec621a6
SHA1

31d9971ac3b0ac6d5ee20827f6547ea602b91254
SHA256

918d399a14cb40ec537e6858aab220cc2f3074697bad469a7894a2b64b484a8b
SHA512

009851c97b1e22b326583db4f4bd948b1da1f820c473910a2d1024ea0019208c1208b9d406ebe04aefc94ea509bd3c140a1d718e6df9887e0227979c6e972510
SSDEEP

1536:FFaunOTexnAj3kimXwF7f6326N9TfV6eg1AB9Xe:DauO8I97yG6N9TpqA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
918d399a14cb40ec537e6858aab220cc2f3074697bad469a7894a2b64b484a8b

Files

918d399a14cb40ec537e6858aab220cc2f3074697bad469a7894a2b64b484a8b
.exe windows:4 windows x86 arch:x86

d4f85f6023f3cfefcbd8aa66214520d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedPushEntrySList
SetConsoleCursorInfo
WriteConsoleOutputW
SetTapePosition
SetFileApisToOEM
GlobalGetAtomNameA
GetConsoleAliasExesA
GetOEMCP
ValidateLCType
DebugBreak
GetTimeZoneInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE