d5be60878e784c7af7c18a232f61a3afff9583336973f633ff9b239e5f53af92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5be60878e784c7af7c18a232f61a3afff9583336973f633ff9b239e5f53af92
Size

73KB
MD5

abe291d78031d6c7491b65d8ec28e203
SHA1

af9e1c5e6c6580bb942813ce114cc04d179958ed
SHA256

d5be60878e784c7af7c18a232f61a3afff9583336973f633ff9b239e5f53af92
SHA512

26d0fac6c1cf1713ce61ac151847ba422e6c7339ab3b6936467aa7e22f3ad42ced4959dd2e72e1cf4bc06781eab4866feb57959f8e53be86d614ff88030584dd
SSDEEP

1536:Zrx10089FBvp0IXZyxAztY4RWzG7MEC5PRwt3rlzbreeIb3qnx70SAWgXbsqKnZJ:J0089FBvp0IXZyxAztY4RkCRyPba199/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5be60878e784c7af7c18a232f61a3afff9583336973f633ff9b239e5f53af92

Files

d5be60878e784c7af7c18a232f61a3afff9583336973f633ff9b239e5f53af92
.exe windows:4 windows x86 arch:x86

6a1895d1f4f9666c9e211f069239eda8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueueUserAPC
GetCalendarDifferenceInDays
GetApplicationUserModelId
K32GetProcessImageFileNameW
GetQueuedCompletionStatusEx
WerUnregisterMemoryBlock
AppPolicyGetShowDeveloperDiagnostic
K32GetMappedFileNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE