dff13ca01ab5e98783079760c3fc9e1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dff13ca01ab5e98783079760c3fc9e1b
Size

66KB
MD5

dff13ca01ab5e98783079760c3fc9e1b
SHA1

5e01f67ddb067ffd93648640caf09271c82ea22a
SHA256

55e6ab580a31dc56e292b62848662b901ccaf32903fdb2dda3f50fa8aca29697
SHA512

e8adfa444848867fc2789ec9ce174606d2f7b1905f7922ffb1c7ac5805930f4a0ca7de590f66cb6a2d7ddd5f7b684e715953712e90fd5b5acc24c885abf7fd52
SSDEEP

1536:P8ru3xVLiISUo33TdBzGYcWNGNvbsB7gQ1W4U8f3uiLS7v4:FD+UghBaYpdeQlU8f3unA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff13ca01ab5e98783079760c3fc9e1b

Files

dff13ca01ab5e98783079760c3fc9e1b
.exe windows:4 windows x86 arch:x86

3d56b2f241aa031c3262452907ec3e6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasA
GetProcessWorkingSetSize
VirtualProtectEx
EnumTimeFormatsA
GetLogicalDrives
SetConsoleInputExeNameW
SetHandleCount
IsValidCodePage
RtlFillMemory
CopyFileA
SetConsoleTitleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE