92af867b4b89767c6d770a19502024028033c47b24e5a6db1965f57e03cefde9 | Triage

Sharing

General

Target

92af867b4b89767c6d770a19502024028033c47b24e5a6db1965f57e03cefde9
Size

1.9MB
MD5

dae9060dfbc3dbf9fefb71705736cb16
SHA1

c5d673e73d0a106caee4204847463441bac8f3b8
SHA256

92af867b4b89767c6d770a19502024028033c47b24e5a6db1965f57e03cefde9
SHA512

6cf8186207554688a683f9e2880435ba626337c7cffe46059c0d18d19de4c3ee41f7cac55b402ea938691f4b2421190931dcb3de292b01ba583e02ad87569ed0
SSDEEP

24576:pKz1qeF+ELQfr1J9NqaRzp1dBnhPb1xjsAnK/+qz1F/NysQqGcjDvGCA3OLjl4/K:pg1qCLGb/vLXdnK//3JJfA3ijaLEUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/v1.exe

Files

92af867b4b89767c6d770a19502024028033c47b24e5a6db1965f57e03cefde9
.zip
v1.exe
.exe windows:6 windows x86 arch:x86

48d4a6a3111a18b082fa3638b1568f64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.%Js
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.-UF
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f>)
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ