d6154725fbd3747d5684bcca2d4683e7 | Triage

Sharing

General

Target

d6154725fbd3747d5684bcca2d4683e7
Size

28KB
MD5

d6154725fbd3747d5684bcca2d4683e7
SHA1

3aca8fa54567084adc880ca19de6482ecb84b334
SHA256

280c406869a339aa3e4e8aa54742af9ecb0de2cf0784907a17f8ba032a9ebf13
SHA512

9acaec5a6cfdecb0a03920c7c908605e99d9c4dd5b1cd7bdbfe34c02fd81eed0c5bf7a5cd65f4c58a71d429aa88d218a9a517393e9d855df3c2ecde7a7ff2d6a
SSDEEP

768:7Exue5lZFoEb5eSpnqKtq/aZQneOE6oxb:0uMlZCALBt9g7E6oh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6154725fbd3747d5684bcca2d4683e7

Files

d6154725fbd3747d5684bcca2d4683e7
.exe windows:4 windows x86 arch:x86

bd2558f8685f9f34e261f434650341a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetSystemDirectoryA
SetConsoleOutputCP
Module32First
SetProcessAffinityMask
VerifyConsoleIoHandle
VerLanguageNameA
ReleaseMutex
HeapAlloc
UnlockFileEx
ReadConsoleOutputAttribute
IsBadHugeWritePtr
DosPathToSessionPathA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

text
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ