b84e53c284161adeaedcf6c384840b5beb7604bbe00d35cdaf3c09baf53b97a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b84e53c284161adeaedcf6c384840b5beb7604bbe00d35cdaf3c09baf53b97a9
Size

2.6MB
MD5

bb0775a8027a0afa6854704d81a6c23b
SHA1

2faf5319815ea64a61e81a08a857d17570cd4fbb
SHA256

b84e53c284161adeaedcf6c384840b5beb7604bbe00d35cdaf3c09baf53b97a9
SHA512

8d8a8a1f1b6f39c5db79b8a67c41e10903b34a33d40b17106ed6c3343cacddecb99596fd2c2c817728d408a4f070a1ac78bf3ef6b5a0b564fda5492e4e362e66
SSDEEP

49152:s00k/t3VCropP97XhQkPRzko/h9v1KjeJRgNbAP+UEsFVVPjuNcK:s0n1Zpljh5F//h9v13q4dFVNjuh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b84e53c284161adeaedcf6c384840b5beb7604bbe00d35cdaf3c09baf53b97a9

Files

b84e53c284161adeaedcf6c384840b5beb7604bbe00d35cdaf3c09baf53b97a9
.exe windows:4 windows x86 arch:x86

89048a25c237a749f3f8b6d613e948ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
_lread
_lwrite
GetStdHandle
ReadFile
_lclose
_llseek
_lopen
SetConsoleMode
GetConsoleMode
CloseHandle
SetFileTime
CreateFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GlobalAlloc
lstrcpyA
lstrlenA
lstrcatA
_lcreat
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcmpiA
MoveFileA
GetModuleFileNameA
SetConsoleCtrlHandler
GlobalFree

user32

wsprintfA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE