81e87e34f3418a36a7bbb96944af85e927b5e77e47794ac96bac8d49ddb630c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81e87e34f3418a36a7bbb96944af85e927b5e77e47794ac96bac8d49ddb630c3
Size

63KB
MD5

7dab91f6f3c970933dd6a56574605eb5
SHA1

ab2c7288768c97e1efc75e34c8c082cb791f0c0f
SHA256

81e87e34f3418a36a7bbb96944af85e927b5e77e47794ac96bac8d49ddb630c3
SHA512

914dcc3af2416b8bb51ec537ed592e7be8d3954875ce9b2ce4ac0b1c5a7162d184e2b5ca0df107661f9fbdb9dd883d6464b3cb811aa96402b5dde958320ba225
SSDEEP

1536:Lwe+itXhjlH48VV40r+W8a/6r3AKB3xl6DVVDKK6Ehua+yrTEpzd5igw5Lf7TO5:Lwe+iBhjlRzrQrxCVc5CuOIpzd57UXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81e87e34f3418a36a7bbb96944af85e927b5e77e47794ac96bac8d49ddb630c3

Files

81e87e34f3418a36a7bbb96944af85e927b5e77e47794ac96bac8d49ddb630c3
.exe windows:4 windows x86 arch:x86

c58addb4c7edabe304858723c7d94e09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameExW
TermsrvGetWindowsDirectoryA
GetConsoleHardwareState
PowerCreateRequest
GetApplicationRestartSettings
ReleaseMutexWhenCallbackReturns
GetTempFileNameA
GetUserDefaultUILanguage
GetConsoleInputExeNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE