e95be445225ff4934a8bc04ab5469bb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e95be445225ff4934a8bc04ab5469bb1
Size

22KB
MD5

e95be445225ff4934a8bc04ab5469bb1
SHA1

0d190be1c25e629e429c2f35bbcbfae00ee77c20
SHA256

69608a14004788b3ebae77331adc91d19df482664a9d39267f28014595ee69e4
SHA512

41457b9c5a21661b9bc5853c167fab5aff19028b19b216fede3344653fe4bffbcc439a2395ef32b303c7456f4c829dc27f6e7ce271fb989c69cd655645d73475
SSDEEP

192:PvkkilCdBwCdcAaoLWB4PIPgApgmKuj8k1kZpzP:PvkCdyCdc2quPogAnKTd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e95be445225ff4934a8bc04ab5469bb1

Files

e95be445225ff4934a8bc04ab5469bb1
.exe windows:6 windows x86 arch:x86

cd8e6a768bcbf7d8f3deeb5e51264eb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CS271\Practice07102023\Debug\Project.pdb

Imports

kernel32

ExitProcess
CloseHandle
CreateFileA
FormatMessageA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetLocalTime
GetStdHandle
GetSystemTime
LocalFree
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadFile
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
Sleep
SystemTimeToFileTime
WriteConsoleA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
WriteFile

user32

MessageBoxA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 685B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ