1454f4a86732ba2c005a3ea5c9126c7ce7df8c1d3c57a47fd1b4f11853d0ca20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1454f4a86732ba2c005a3ea5c9126c7ce7df8c1d3c57a47fd1b4f11853d0ca20
Size

63KB
MD5

2f6072e6b5684426743bc4dfd8d4f06a
SHA1

7ebae49e539ddc0beef937eb1cacad6870ed6cd4
SHA256

1454f4a86732ba2c005a3ea5c9126c7ce7df8c1d3c57a47fd1b4f11853d0ca20
SHA512

4abfd5a24729ab248df8337aa28fe3257351f9b1dbbde039286845f7216f8dc9ee7ef02bfbcb53c98e2b6a311f835be1a3e60e3a8bb32a601e52161581a0f1fb
SSDEEP

1536:OQtms63hG8bwTxRyxjC5IXYGiS5oTviVnPJujWowhH/rCLTV+t1Hdr+xNjsiI2Ou:g+oFCw2bmCcHvr5DijVB3Uo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1454f4a86732ba2c005a3ea5c9126c7ce7df8c1d3c57a47fd1b4f11853d0ca20

Files

1454f4a86732ba2c005a3ea5c9126c7ce7df8c1d3c57a47fd1b4f11853d0ca20
.exe windows:4 windows x86 arch:x86

22531e63396336b167038ce71b4bb354

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetProfileStringW
CreateFiberEx
SetFileApisToOEM
SetThreadUILanguage
CompareStringW
RegisterConsoleOS2
GetFirmwareEnvironmentVariableExW
GetWriteWatch
QueryThreadCycleTime
FindResourceExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE