95f439c4e7c87d8c9a06a8e27a7129f0375cf2c026787bf22cf39e55c5f97fac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95f439c4e7c87d8c9a06a8e27a7129f0375cf2c026787bf22cf39e55c5f97fac
Size

63KB
MD5

5c5593bd41c76c5d800f0c76e1626690
SHA1

e38ca86b644bf23a266d220b1d5e14f288b53824
SHA256

95f439c4e7c87d8c9a06a8e27a7129f0375cf2c026787bf22cf39e55c5f97fac
SHA512

49a27537507490996f6e102b2c6abe699ccf0ae4d97d91c506ad4dfb47022a08aa326473d90b93954822afc6888df2d0515d71b9aa206bc8ec61f3abe936f560
SSDEEP

1536:VqStGlPxzdbmZKncBiP8LEn1le2C5J8NJ:VqStGtxzsBmrnzeBr0J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95f439c4e7c87d8c9a06a8e27a7129f0375cf2c026787bf22cf39e55c5f97fac

Files

95f439c4e7c87d8c9a06a8e27a7129f0375cf2c026787bf22cf39e55c5f97fac
.exe windows:4 windows x86 arch:x86

2fedba0b57402a349661e1b5b6d8df1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory
GetLogicalDriveStringsA
SetConsoleNumberOfCommandsW
CreateThreadpoolTimer
lstrcpynA
OpenEventW
EnumResourceTypesW
DnsHostnameToComputerNameA
SetConsoleLocalEUDC
CreateProcessAsUserA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE