a69390d49827152ac1056a9ecfe079946ddb021243a52b333ab456758a49b4ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a69390d49827152ac1056a9ecfe079946ddb021243a52b333ab456758a49b4ca
Size

320KB
MD5

a7cbe8132d7d63c7e80bc9d6bb724370
SHA1

34732948ce5847f234e57911e5d38eca2ef7ca6c
SHA256

a69390d49827152ac1056a9ecfe079946ddb021243a52b333ab456758a49b4ca
SHA512

062975f93f4c68fb35bdd42ab5f84b495a081893340d16c5c30754b764912a9fec6dfc8aae3b620923a271d57cf7893304e240b7027acb426f0c9f426743025e
SSDEEP

6144:PZwhkQE0+jH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:xpPL2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a69390d49827152ac1056a9ecfe079946ddb021243a52b333ab456758a49b4ca

Files

a69390d49827152ac1056a9ecfe079946ddb021243a52b333ab456758a49b4ca
.exe windows:4 windows x86 arch:x86

e311473306cff5b995d9b09e198a9d0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryW
GetConsoleInputExeNameA
FillConsoleOutputCharacterW
DosPathToSessionPathA
Module32First
FindVolumeMountPointClose
SetCommConfig
GlobalFix
GetConsoleCursorInfo
LCMapStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE