0578f94b6db83599ef7427e9acada59d157953dccfffcd240377a0f85657890c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0578f94b6db83599ef7427e9acada59d157953dccfffcd240377a0f85657890c
Size

24KB
MD5

6618412163fcc21dd5c3be8fea0a24e4
SHA1

b6a61f0fc081b5c0f6ca3401b47d631efd9d1513
SHA256

0578f94b6db83599ef7427e9acada59d157953dccfffcd240377a0f85657890c
SHA512

db494abc7820fe5cd2c406e20a8416e2eef23cd905f7e414d31d4d17100ad54c70de9c1207261406f55c7dc518bb7abbc47469411b1673864ab2c9325328b88c
SSDEEP

384:r4uTcm2P/mzi4QaB12dkYE9bPPhecF8mF3mx6i5XtkXAMG1Vq0f9P7y:rncmtdnnRHheiRmx6ijkXBcVnf9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0578f94b6db83599ef7427e9acada59d157953dccfffcd240377a0f85657890c

Files

0578f94b6db83599ef7427e9acada59d157953dccfffcd240377a0f85657890c
.exe windows:6 windows x86 arch:x86

4248e15e54e0be4b3ad14107aa495191

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
GetWindowsDirectoryA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ