e564612d91a28f61eb1f90bbb6ef4b1a3ebf4c9494132c732074f4eabe2e8498 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e564612d91a28f61eb1f90bbb6ef4b1a3ebf4c9494132c732074f4eabe2e8498
Size

47KB
MD5

4db269e7466e92ab5882410ff8d6a38d
SHA1

25b9d47e962c54d75a2c905c72b1aaf6b7602dbe
SHA256

e564612d91a28f61eb1f90bbb6ef4b1a3ebf4c9494132c732074f4eabe2e8498
SHA512

d6c2221bd5ee91d411a84c8e2b9b85ec3a69304750350f596f7f9a0bc636aa30d7d869af955a2fb453c6707b20cf0a807ef9a0c3d37ad17d1f69f1c67c2122c0
SSDEEP

384:6J3ZVovP2iVRExgXnZaumBxSMdcoTrSogBJudB9t3OWmFrBop78acdXYlYYza9BH:61SRDXnZZJudB9tM3oZc9aYJ9BAm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e564612d91a28f61eb1f90bbb6ef4b1a3ebf4c9494132c732074f4eabe2e8498

Files

e564612d91a28f61eb1f90bbb6ef4b1a3ebf4c9494132c732074f4eabe2e8498
.exe windows:5 windows x86 arch:x86

fd1d68a169a2a7ae3397a585f25bba38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

RegisterCMMW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ