fed15453d9f86aaa39f29931afa49f84d16af1bac08c326e989ee3348af100b1 | Triage

Sharing

General

Target

fed15453d9f86aaa39f29931afa49f84d16af1bac08c326e989ee3348af100b1
Size

320KB
MD5

b011bfcc59ed2f6164ca67f926f96ab4
SHA1

384d0e1a0ded811fffc07885bc69a86365df61ee
SHA256

fed15453d9f86aaa39f29931afa49f84d16af1bac08c326e989ee3348af100b1
SHA512

290c8b17688dcfd480cf7f3984a223775b5961b0513fb7babd9de534f2e730ead38337c9b255e0c99219d87882634d3356c4c16e903b66dc1c30a591c127068e
SSDEEP

6144:FB8Wct/pAH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:wWcs2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fed15453d9f86aaa39f29931afa49f84d16af1bac08c326e989ee3348af100b1

Files

fed15453d9f86aaa39f29931afa49f84d16af1bac08c326e989ee3348af100b1
.exe windows:4 windows x86 arch:x86

0a06ee78d7b3da36793332b6b7e8fbce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
FormatMessageW
GetPrivateProfileStructA
EnumSystemLanguageGroupsW
GetWindowsDirectoryA
lstrlenW
InterlockedDecrement
WriteFileEx
LocalSize
ExpungeConsoleCommandHistoryA
IsDBCSLeadByteEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE