af899e5f68026829620bfdb5030324461474a5e023da8fc71518fbdc77d32ab1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af899e5f68026829620bfdb5030324461474a5e023da8fc71518fbdc77d32ab1
Size

63KB
MD5

fb3c5892dd4076109f3244c3374498ab
SHA1

a00eda5dbc0fde75476418b46983f2170c771107
SHA256

af899e5f68026829620bfdb5030324461474a5e023da8fc71518fbdc77d32ab1
SHA512

72e3b4b84386de522c5dab8270de86bf12ac2cab1fc81bfebc0f08c9643e2c8e0b91b9a51b5bcb6e32d8731f64dc05f371a928b05c598e501171a3ba8143c6bd
SSDEEP

768:mkD6fF+qkSX0zIeVh95IbrTiwjIwVSqHHUbsvS7mY1VNL+5ZpdBXRG1Tuw43mpVo:jDn47HmrL29BAJCwVU/G9Ftnu/XLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af899e5f68026829620bfdb5030324461474a5e023da8fc71518fbdc77d32ab1

Files

af899e5f68026829620bfdb5030324461474a5e023da8fc71518fbdc77d32ab1
.exe windows:4 windows x86 arch:x86

57134f18c815d88327f7e41509a34590

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeLabelA
DeleteSynchronizationBarrier
SetThreadStackGuarantee
GetDevicePowerState
MulDiv
FlsAlloc
MoveFileW
EnumDateFormatsA
RegOpenKeyExW
GetLocaleInfoEx
EnterSynchronizationBarrier

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE