286b58f912a1c022893b5670ffd608a242473786b4978901fef77527af333cc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

286b58f912a1c022893b5670ffd608a242473786b4978901fef77527af333cc1
Size

6KB
MD5

751d4f4320544b1c8574fa80d95fae18
SHA1

648f3996fb342829b56ca9688f08d5e9b56e2da3
SHA256

286b58f912a1c022893b5670ffd608a242473786b4978901fef77527af333cc1
SHA512

0c2f28504b02c9998017ee8d7fd603d706aeeed6c3413520f2ad0216cffcc990dc24a3e99b6ad2370e6796818ce2e5c0ad1a17540aead208d1fc2d2e99bc8809
SSDEEP

48:SNbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uNO:00mIGnFc/38+N4ZHJWSY9FI5WqWx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286b58f912a1c022893b5670ffd608a242473786b4978901fef77527af333cc1

Files

286b58f912a1c022893b5670ffd608a242473786b4978901fef77527af333cc1
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ