a069ef5a2bdb50713731bc1792a2d311bd012714f8f64c806d1a124f59022b80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a069ef5a2bdb50713731bc1792a2d311bd012714f8f64c806d1a124f59022b80
Size

63KB
MD5

12b01a568b7893ac89044e4a5153c4e5
SHA1

d99678f4c040b6d9e26f0eb5ebf42c35457da5fe
SHA256

a069ef5a2bdb50713731bc1792a2d311bd012714f8f64c806d1a124f59022b80
SHA512

a8f304b74f3d15e7c469ac3f27652a26267fe3050c4883cc6d53d301e1b516c26badbe2d6294dc18b7eab01a7e9251b314821e9564c01b9ec5616f1aeaa946ce
SSDEEP

1536:SmmmL6h4m0+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:o4mrHwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a069ef5a2bdb50713731bc1792a2d311bd012714f8f64c806d1a124f59022b80

Files

a069ef5a2bdb50713731bc1792a2d311bd012714f8f64c806d1a124f59022b80
.exe windows:4 windows x86 arch:x86

9e2e4651f45262f11da9f5415cb6fad3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
GetEnvironmentStringsW
SetThreadPriority
RegisterWowExec
SetSystemTimeAdjustment
SignalObjectAndWait
CreateDirectoryExW
GetPrivateProfileStructA
SetEndOfFile
WritePrivateProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE