df5fbc8fb5ab1e9a69c72508250cb451 | Triage

Sharing

General

Target

df5fbc8fb5ab1e9a69c72508250cb451
Size

8KB
MD5

df5fbc8fb5ab1e9a69c72508250cb451
SHA1

ede0e0e8b1fc87f56f6f64677fc6d7f791a02ede
SHA256

1390ea5f5b0a4aa93770e7cf5fc91de2702ebe3cbe11638be25cb627c9abbce4
SHA512

f58ad82cb5591bd4b90e9a80c9bfc25ce9245607d554f748c97d28a33a00217f01777de994b8c201015cc3d95751edb2c47304640cec6aae290699dafca7c62d
SSDEEP

192:KBxQHgMUjf4XpukVUyVAfGYU9qDhESJWFciv:Ay+f45uUU79LU6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df5fbc8fb5ab1e9a69c72508250cb451

Files

df5fbc8fb5ab1e9a69c72508250cb451
.exe windows:4 windows x86 arch:x86

2e7325551417bbf08be2020a35ab4489

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
TlsGetValue
SleepEx
GetTickCount
GetCommandLineA
TlsSetValue
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
IsDebuggerPresent
GetVersionExA
TlsAlloc
CloseHandle
GetCurrentProcessId
TlsFree
CreateThread
lstrcpyA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE