603756109afa6db774285d4f521f0aad041813c39b809d5908abd79c743caddd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

603756109afa6db774285d4f521f0aad041813c39b809d5908abd79c743caddd
Size

320KB
MD5

b93d7cc41d7755af8171a736611a5f58
SHA1

384736f879e6e3c4e4d81f25d531976b7667d4ab
SHA256

603756109afa6db774285d4f521f0aad041813c39b809d5908abd79c743caddd
SHA512

4b07c76cf392118f35a4b32186633497935a5ca7c9acd888fe8ceddf7d622de2b0dbcf4656e7c6eb473f06ecbdf84c9b285fd5fc8915a4eb5e7459f031e572d1
SSDEEP

6144:jBR8jvXI2bH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:jXy2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603756109afa6db774285d4f521f0aad041813c39b809d5908abd79c743caddd

Files

603756109afa6db774285d4f521f0aad041813c39b809d5908abd79c743caddd
.exe windows:4 windows x86 arch:x86

d97f8f781e792a9b8e49ca0ee03e017c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameA
Toolhelp32ReadProcessMemory
LocalLock
EnumResourceNamesW
ExitVDM
GetLocaleInfoA
SetConsoleCP
GetComputerNameExA
FindResourceW
GetFileAttributesExW
SuspendThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE