e452aafec79f3dc4ae9d9427f2f34e78426e5110974a8be57699913cf81d91a2 | Triage

Sharing

General

Target

e452aafec79f3dc4ae9d9427f2f34e78426e5110974a8be57699913cf81d91a2
Size

62KB
MD5

5aa347cc9acaf5f2fbb621319929613a
SHA1

db5471c5f7cf7caaba2eb13c2c912f43b8342ba7
SHA256

e452aafec79f3dc4ae9d9427f2f34e78426e5110974a8be57699913cf81d91a2
SHA512

4561509fefb24b6cc8c6d6f00564b417fd1b26488278bedec85b075817a68c49eace02efb1a78bd1bfe14af7b32aa2b0a5305c27cb1bdeaf6e7307944bf20588
SSDEEP

1536:nkdLtHkjP414dfILxA/aNFCSkD/4E/P3gWWvM5/bTCkfTBnkh:nkdLRk014dff/gFCSu/4EngDMJvCkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e452aafec79f3dc4ae9d9427f2f34e78426e5110974a8be57699913cf81d91a2

Files

e452aafec79f3dc4ae9d9427f2f34e78426e5110974a8be57699913cf81d91a2
.exe windows:4 windows x86 arch:x86

f01240fd77cd05b001aac392be4e9ea6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobObjectA
FlushFileBuffers
GetCalendarDifferenceInDays
CheckForReadOnlyResource
GetNamedPipeServerProcessId
CreateIoCompletionPort
FormatMessageA
_lopen
GetEnvironmentVariableW
SetFileIoOverlappedRange

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE