659b98d19d78e8fe88dc0e2448b3cdde3a4dc08eb63fc0ad491bc0c2e1569302 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659b98d19d78e8fe88dc0e2448b3cdde3a4dc08eb63fc0ad491bc0c2e1569302
Size

479KB
MD5

3298d5a7cc1cc3865c5a4b73c712bf6a
SHA1

998cbb888f4c54f1dc34c6348bb1ec8fa722b9df
SHA256

659b98d19d78e8fe88dc0e2448b3cdde3a4dc08eb63fc0ad491bc0c2e1569302
SHA512

e913d1022d1e89c59ea6ccbf1716f11264d93f3cfd2ef9fead8442fe160720d8ec4efe8c6396932308c40b8dfe744ec2dff65f2975b203890010f0b678b7f01f
SSDEEP

12288:/g8Bpk2gAAkAemz5mtEXuoyhlgETkz+2L:bkRAAkBOYMuo+lRQK2L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659b98d19d78e8fe88dc0e2448b3cdde3a4dc08eb63fc0ad491bc0c2e1569302

Files

659b98d19d78e8fe88dc0e2448b3cdde3a4dc08eb63fc0ad491bc0c2e1569302
.exe windows:4 windows x86 arch:x86

3e12ac52d4ff7c6053fa965879f69576

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultUILanguage
GetCurrentDirectoryW

oleaut32

VarDecSub
SafeArrayGetVartype

advapi32

InitiateSystemShutdownA

user32

GetProcessWindowStation
GetOpenClipboardWindow

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 351B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE