5260c2949000f9def9dd61ce2045f13d84192aac6339df871649497561adcc87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5260c2949000f9def9dd61ce2045f13d84192aac6339df871649497561adcc87
Size

183KB
MD5

20a6be34a9cdf9bcac2316cee9f7ce37
SHA1

5e8b208cfceca65c9fde8563cb9058df103872d7
SHA256

5260c2949000f9def9dd61ce2045f13d84192aac6339df871649497561adcc87
SHA512

25120246677c8a276ca8e9bcea8b390e02f1faecd16d34568a6c3df8377490ce6432faa588af7098db5196eff1d265136617254fb2e0321baf5448b5bdd86c90
SSDEEP

3072:t03Kvj7+d3VV/t5fT0UzA+YninOtowQgv4I/ZS5nthIQRzKnAiWs5u53V17Q:P77+dLl5fTxKninOtowQgs5VKn2hVhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5260c2949000f9def9dd61ce2045f13d84192aac6339df871649497561adcc87

Files

5260c2949000f9def9dd61ce2045f13d84192aac6339df871649497561adcc87
.exe windows:5 windows x86 arch:x86

887216cd14dc07ac5c7539304e24449b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetMessageW

gdi32

DeleteObject

advapi32

AdjustTokenPrivileges

shell32

ShellExecuteW

ws2_32

WSAStartup

Sections

.text
Size: 177KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE