dec9c0cfde2637b71fe84fe06709083f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dec9c0cfde2637b71fe84fe06709083f
Size

76KB
MD5

dec9c0cfde2637b71fe84fe06709083f
SHA1

6a6b1b832d3d0b96376586900f1460fc6d12c8de
SHA256

c48a6d7c2252f0aebdd56075af1454038b7301f8765c78a122b1f77bd7fb04b4
SHA512

75064451a0e7946e856571179ba0c6c3475ba8c99651a84545d5bbaae9ec371e6a44c19d03fda7f9c259d2ccaba3f2f9693ffbb88e06532fe60aef93aa06de85
SSDEEP

1536:xycccXeF+wVuUZdVWMKvfUqeCmrTsppjVrs2ryrd1vUQuq6:BwoUWvfoiHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dec9c0cfde2637b71fe84fe06709083f

Files

dec9c0cfde2637b71fe84fe06709083f
.exe windows:4 windows x86 arch:x86

0b889b22a024b4dcf6050a05ba5506f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
InterlockedExchangeAdd
GetWriteWatch
AttachConsole
CancelTimerQueueTimer
SetThreadExecutionState
HeapReAlloc
DuplicateConsoleHandle
GetCalendarInfoW
OpenSemaphoreA
EnumCalendarInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE