9165949586b98d3a6262196152be4b484d166152846ef7a74c0af66ae9d3dd4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9165949586b98d3a6262196152be4b484d166152846ef7a74c0af66ae9d3dd4e
Size

92KB
MD5

d5200dde20fa9fd622f6921c31ece52d
SHA1

3473137a3fc61df0b23aadbec46857ba17be459f
SHA256

9165949586b98d3a6262196152be4b484d166152846ef7a74c0af66ae9d3dd4e
SHA512

841d66ed7c7779fd6142ff9aea1fcff66731a9f8d038f78df413f63d6e98b996688643e2b37cad0c6c51213027b1e12f63dd5fbde668f8c4b34318ffe866baa2
SSDEEP

1536:e8gQxBqX1wl9Ctg/1xMC9P/9nefk1tCrvSFRrq5RUjEErxTWDTMqhGKYIZTET8uQ:evaMWTCtgll9nJvCrqFRrMRUjBkMqhGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9165949586b98d3a6262196152be4b484d166152846ef7a74c0af66ae9d3dd4e

Files

9165949586b98d3a6262196152be4b484d166152846ef7a74c0af66ae9d3dd4e
.exe windows:4 windows x86 arch:x86

016b6a836b626f6b32d327cd7b144e45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileApisToOEM
InterlockedPopEntrySList
SetCurrentDirectoryA
GetLogicalDrives
HeapUsage
GetEnvironmentVariableA
LZOpenFileA
GetConsoleCursorMode
ExpandEnvironmentStringsW
GetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE