de58b9b526bae6199c2151e47ead6822 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de58b9b526bae6199c2151e47ead6822
Size

8KB
MD5

de58b9b526bae6199c2151e47ead6822
SHA1

27c648a6ea2b57bc6edc165e90c4d6f5d8202603
SHA256

951635c819bed32bb43406fa8f755a983bb55080129d0747ad512b24392243c4
SHA512

ada74f227f1be8517a93fd1d0014e7965b4deb38918045ffda08b97b757ccd4405dd7a5fb831d6f39c9924756eb7d85de44b7c3563c5eced09b1c0998c72bb04
SSDEEP

96:z4yFRhovENLlTFHilCwXxVZUlKOfKiEbXQqaXHVjNUx4qVW009HnSU4S:kUocNpTFspVZBOlZqyxzqm9HS7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de58b9b526bae6199c2151e47ead6822

Files

de58b9b526bae6199c2151e47ead6822
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE