289628e33e86436ae4f505514000088f13f322b82218d2e738b4586b1533c86f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

289628e33e86436ae4f505514000088f13f322b82218d2e738b4586b1533c86f
Size

32KB
MD5

cd29744467bd83d810a033388fac0f53
SHA1

380d0a0df7091fe3d893cd9749f707af209be43e
SHA256

289628e33e86436ae4f505514000088f13f322b82218d2e738b4586b1533c86f
SHA512

58f8a74d8d4e294342e662e2ac0e180a4b3e9c99b128de044436d3324b999b6c8b1ce86fab45e0503ddecdb1c1eae8ce973bfb511d2725aa5eb2c31ab5da4982
SSDEEP

384:4x1gRTUWKsyq5jB/iYHndtrNDnS6CQGLDQ/x9GYw6wC6UN2O6:JyUpfpnSm/xQYni

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
289628e33e86436ae4f505514000088f13f322b82218d2e738b4586b1533c86f

Files

289628e33e86436ae4f505514000088f13f322b82218d2e738b4586b1533c86f
.exe windows:5 windows x86 arch:x86

4278480a3186073fb1ab5bf06d0588eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCommandLineA
ExitProcess

user32

CharNextA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE