002f15565a1defe0601c4f84bc06dc2ec5fd6e4eac6c2fbd2827b759aedb1468 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002f15565a1defe0601c4f84bc06dc2ec5fd6e4eac6c2fbd2827b759aedb1468
Size

63KB
MD5

aaa5ad0bd8fe6b592f881f5b66c7ce87
SHA1

f6f0e1f9b51d0aa7dc35dd9315d613078f438ac4
SHA256

002f15565a1defe0601c4f84bc06dc2ec5fd6e4eac6c2fbd2827b759aedb1468
SHA512

f0aa40acb33b5a58b5af0d74e6d75ba1a7c9d9c9b261c9fda2b527791bc8a92670b84d376aadd50e80796aae53b5fab92d1bbdac59390d8bd55b3f9ea04077b3
SSDEEP

1536:gg4McV+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:ggFcyHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002f15565a1defe0601c4f84bc06dc2ec5fd6e4eac6c2fbd2827b759aedb1468

Files

002f15565a1defe0601c4f84bc06dc2ec5fd6e4eac6c2fbd2827b759aedb1468
.exe windows:4 windows x86 arch:x86

2e861815365caf98fbf16945293527a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleA
DecodeSystemPointer
EnumDateFormatsExW
lstrcatW
SearchPathA
OpenJobObjectW
GetLogicalProcessorInformation
QueryMemoryResourceNotification
GetConsoleCommandHistoryW
AddVectoredExceptionHandler

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE