d8c581333643b2e3e4535831627624912458d3ab2ab64affa8abc017a14ed461 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8c581333643b2e3e4535831627624912458d3ab2ab64affa8abc017a14ed461
Size

2.1MB
MD5

06b50f62e5838f1e9743e953e8d03aa3
SHA1

c9b41d5636ca20714ee3281bcc2d63eee6debed4
SHA256

d8c581333643b2e3e4535831627624912458d3ab2ab64affa8abc017a14ed461
SHA512

c0ba779882da53e7655cbb437e17d9cd3361b47193b8e3b44b4df70643d5de3276807cf9c82d73842ef67609a835812bafdc77fb23347ba9a37399bc7e169375
SSDEEP

49152:VFrsg37vaGAjihk7AARD+5yraqLKlPm7Nr6m:V9bbfhklNmynulqr6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8c581333643b2e3e4535831627624912458d3ab2ab64affa8abc017a14ed461

Files

d8c581333643b2e3e4535831627624912458d3ab2ab64affa8abc017a14ed461
.exe windows:4 windows x86 arch:x86

66cd896c4c54f71ea91545a1e3b06e32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
VirtualProtect

msvbvm60

ord582

protectstorage

Transfer

Sections

.text
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grd0004
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ