854c05f0eb211351308a65d7f493b257e18f70fd217518ce4e2a3af80674f893 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

854c05f0eb211351308a65d7f493b257e18f70fd217518ce4e2a3af80674f893
Size

40KB
MD5

c300b51c3aded9b43dae97fb3c320a93
SHA1

3f23ea056cbb3636d485d112c0a499e734952373
SHA256

854c05f0eb211351308a65d7f493b257e18f70fd217518ce4e2a3af80674f893
SHA512

93794161836953155390890b9be985d8ecb329e2a46a2a8e4bea3900c8bd2a6c42b40bf4a23744120b29d28acd492bca1b009af89cd9a77edcb665629dbd8c27
SSDEEP

768:NqQoj/dSzNVQ1mDNJWbKEdBMQXQ3Cn4eQQ9rcwxzhjPE3LLZ4:MQoj/YNJcAQ9TZ8bLi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
854c05f0eb211351308a65d7f493b257e18f70fd217518ce4e2a3af80674f893

Files

854c05f0eb211351308a65d7f493b257e18f70fd217518ce4e2a3af80674f893
.exe windows:4 windows x86 arch:x86

0c93a546ce014b95ee53a00e9f2ffe55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
Sleep
GetLocaleInfoA
GetStartupInfoA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ