d67292cec5c98d51fb1c8ef0058fe7d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d67292cec5c98d51fb1c8ef0058fe7d7
Size

108KB
MD5

d67292cec5c98d51fb1c8ef0058fe7d7
SHA1

241b871fdd7ccc0a1a17e1058139376a5af4bf96
SHA256

5fbe8a9c2215fdee7ef5b31ae6524d201177d3067453417a5072227e6a25c101
SHA512

48ae4c9b109ca9fb23be0bf9ed110b2e9b0169f50ec07867a5fd2b9b0660dcfe49f838f9418dc291c4695c2593359b258cf6aaffc8acb0ef61ef91824f14304b
SSDEEP

3072:CSGoJCeoWcy3jFC/y6hkyUNwVxw65SY0HpUP:CGCeoWL3hiANC5SY0HpUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d67292cec5c98d51fb1c8ef0058fe7d7

Files

d67292cec5c98d51fb1c8ef0058fe7d7
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

459fe0261286ef00e1d8ced67d826714

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ