1684b61db65a5c796efbb938d03db5ecff92fb676c8657f285385c85e7c3a1af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1684b61db65a5c796efbb938d03db5ecff92fb676c8657f285385c85e7c3a1af
Size

28KB
MD5

69c03407a9f2c384fe9011038b5e7ee3
SHA1

24c28cb23568071758eae1a20f11085c5c3e6168
SHA256

1684b61db65a5c796efbb938d03db5ecff92fb676c8657f285385c85e7c3a1af
SHA512

7d4818688956792e6021328d253a7a78186032d31fd737addfe706431b5583cf80344548ee8bd53031a7b8e62661ea7023820503b40b12ed3a8b5988a4e7ba59
SSDEEP

768:N+oWq8y7aedzKqErIDS5oMjy+HVTifmkfgDH0ndrK9wgv:NhD80aMui8Z9ijMi2Sgv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1684b61db65a5c796efbb938d03db5ecff92fb676c8657f285385c85e7c3a1af

Files

1684b61db65a5c796efbb938d03db5ecff92fb676c8657f285385c85e7c3a1af
.exe windows:4 windows x86 arch:x86

f4b8f6c8e7d313fc10f7dd1684ff3a7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
GetNamedPipeHandleStateA
SystemTimeToTzSpecificLocalTime
SetConsoleOutputCP
WaitForMultipleObjectsEx
OpenFileMappingA
GetSystemWow64DirectoryW
MapViewOfFileEx
GetNumaNodeProcessorMask
GetComputerNameExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE