deb2899275bef9fe12fc96a4134f2ac8 | Triage

Sharing

General

Target

deb2899275bef9fe12fc96a4134f2ac8
Size

66KB
MD5

deb2899275bef9fe12fc96a4134f2ac8
SHA1

03f62e7bce83e1c10d1a9063b7c44fa595db5784
SHA256

4d29e323e9fbdabaf685c178bacec537b118ee484c649e4fd91deb51c3344d7e
SHA512

e13bcc16fb513b5ecbdfb7b7e36b6cf3079f9a424184bea3af4e7014001936c7b355efa776c81c8c7c19832cc6c91e2400e2a3e6dd3bf6b21385a2942b11bfff
SSDEEP

1536:fFat2oQvS2bOwWu235GGxy4yZnygGpVS5NOnfo+wBcUKw6yQ:datAvS2ywWu2JGewnUpVS5NPBBhDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deb2899275bef9fe12fc96a4134f2ac8

Files

deb2899275bef9fe12fc96a4134f2ac8
.exe windows:4 windows x86 arch:x86

97112d26e5e66a57837b6be638afa7ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileSectionA
GetSystemDefaultLCID
SetEnvironmentVariableW
EnumerateLocalComputerNamesW
GlobalWire
GetProcessVersion
FindActCtxSectionStringW
GetVersion
SetProcessWorkingSetSize
WriteConsoleInputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE