3086612cdc9a1b2c18f37bedca810f80 | Triage

Sharing

General

Target

3086612cdc9a1b2c18f37bedca810f80
Size

64KB
MD5

3086612cdc9a1b2c18f37bedca810f80
SHA1

524f3850fc2574a5b3790f9081857a9e74ac495d
SHA256

1f199af5ac0d62262ec05122fd95ba903765ced06ada25ab2558512a2e83888c
SHA512

21192d67ea7b42d2555bfa83660f686e98da7bd31b022a149c7243d570ca7ceb969dae802eed3eae772144169fe72ef3f71e17bc94492cd9bbc3635fb8c439a7
SSDEEP

1536:1PPxZ9dx8AbS0TovkhofPiZ/4s4n8ufN8g18GR:1PZZHGALcfmv4nHVia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3086612cdc9a1b2c18f37bedca810f80

Files

3086612cdc9a1b2c18f37bedca810f80
.exe windows:4 windows x86 arch:x86

64d3acbfa0986dd312c18e013f3d6b91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnfix
TlsGetValue
GetConsoleAliasesW
DebugBreakProcess
lstrcpyA
SetConsoleCP
LockFile
FindActCtxSectionStringA
SetVolumeLabelW
EnumSystemCodePagesA
HeapAlloc
lstrcatW
QueryActCtxW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE