132770c0e0a42f295679e3d944da9f3fc1647387d921297c5d4d7ff7ba80fca3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

132770c0e0a42f295679e3d944da9f3fc1647387d921297c5d4d7ff7ba80fca3
Size

99KB
MD5

7bb5fb4045ffe176e886af9f69d338ce
SHA1

75cfedd9aab36ccf8dd5adac87cee595ba01614f
SHA256

132770c0e0a42f295679e3d944da9f3fc1647387d921297c5d4d7ff7ba80fca3
SHA512

c17664c537c0e575873e1e5d746ff58026166d6c2a3583815e38ec453291d01d595b243617d68f8bb829354a2efda8b88d5513c02ed22d608cd8bb109ffe5871
SSDEEP

1536:veK01hin6cXC2SDepiziwcAWV3B5rXe2BKH5YP5SCrwKGu2MGDrErJnFa2Vkv3VQ:GOntCZisEPz5SCsu2oh40kv3VucVEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
132770c0e0a42f295679e3d944da9f3fc1647387d921297c5d4d7ff7ba80fca3

Files

132770c0e0a42f295679e3d944da9f3fc1647387d921297c5d4d7ff7ba80fca3
.exe windows:4 windows x86 arch:x86

fa08ba89a81c5b166bce5758ec125a87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
SetSystemPowerState
WriteConsoleOutputA
GetNumberFormatEx
SetThreadpoolWaitEx
ClosePrivateNamespace
UnregisterApplicationRecoveryCallback
CallbackMayRunLong
CloseThreadpoolWait

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE