2024-05-20_9c9053f7b913567db6dd0bc021c45b63_ | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-20_9c9053f7b913567db6dd0bc021c45b63_
Size

25KB
MD5

9c9053f7b913567db6dd0bc021c45b63
SHA1

b2635747ee63a08914c760bfd7f9c0afcde6c390
SHA256

c37a836bb806e2953add59a93a666794bfd3e47f6a35a60da962893edaf0335a
SHA512

408b4a2e4533704c7bbba4407bc6f1665d70a4de233ac7707b29a43da7d752a76f79ac54352716901795e25b7b3840a9f937a023a06827757d8d210bc13ed929
SSDEEP

384:jUGb1VGBDEYtUxTKcpk0sAD3T40Ea1H3kuAvmacV02p4bnCz3667L3ey1NhFAR:jUt4xmcpzD3TF1H3kuAwSb23NH3eyz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-20_9c9053f7b913567db6dd0bc021c45b63_

Files

2024-05-20_9c9053f7b913567db6dd0bc021c45b63_
.exe windows:4 windows x64 arch:x64

c6e5a1eb2fc21c13281dffed6cf3e1cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

S:\src\github\yori\fscmp\fscmp.pdb

Imports

kernel32

ExitProcess
GetCommandLineW
WriteFile
WriteConsoleW
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetConsoleMode
GetStdHandle
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleW
LoadLibraryW
WideCharToMultiByte
GetEnvironmentVariableW
SetLastError
GetCurrentDirectoryW
GetVersion
GetCurrentProcess
GetSystemDirectoryW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ