f51a20068578fb69fdda94fcc25e84dff7368e841ac2af43bef207524ec69d77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f51a20068578fb69fdda94fcc25e84dff7368e841ac2af43bef207524ec69d77
Size

56KB
MD5

77c3ac873156d920d76d7cf514d312fa
SHA1

b52bd4c3c97098118ec1e0111335155b6520894a
SHA256

f51a20068578fb69fdda94fcc25e84dff7368e841ac2af43bef207524ec69d77
SHA512

21ceb3fd7334e6cf64f9589106766cd084a6b7ac38c1a1372f8fd20671507ce37df13f8fdb299190707339b515f14447ed405b9c1873a5b575d9ff699d78e274
SSDEEP

768:vAVzh6bt/eiySDLMglFLS2DBIxOm3ldvVYCOxQ2x6rHdM8Xnq1OIhxUdSRWriU5l:v0cbgSzwhnvKr6q48xUQ0bHSYI2qL+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f51a20068578fb69fdda94fcc25e84dff7368e841ac2af43bef207524ec69d77

Files

f51a20068578fb69fdda94fcc25e84dff7368e841ac2af43bef207524ec69d77
.exe windows:4 windows x86 arch:x86

19b2c4c7c426098fbad6ffdd13a7a251

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
SetComputerNameEx2W
InitializeSynchronizationBarrier
SetTimerQueueTimer
LoadAppInitDlls
Thread32First
GetUserGeoID
RegisterConsoleVDM
GetStringTypeExA
SetConsoleTextAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE