5276c4b9f335d4e58aedab28472124cc8b987b40db94c7c05388bd140691628f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5276c4b9f335d4e58aedab28472124cc8b987b40db94c7c05388bd140691628f
Size

63KB
MD5

454b0b29bb8331bcfea31002c5196957
SHA1

7a62997694b2aca7dd3e8a5878532072cfb8bde6
SHA256

5276c4b9f335d4e58aedab28472124cc8b987b40db94c7c05388bd140691628f
SHA512

ab841bd3cc29e0dbb33834cd2c8a00bd518f6a5b5b90a388eb5b15d81a59c9a2602185a8ec3ed2b50d85487ee07226bb70f31dc4b437c7bdd5f0a596c954a2c1
SSDEEP

1536:tNWItaIDW8AKiFqArqWqoct51qdcK7XRl04sOJnSSgw2pp:aqa6yHBqWqBCPXRlDnWjr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5276c4b9f335d4e58aedab28472124cc8b987b40db94c7c05388bd140691628f

Files

5276c4b9f335d4e58aedab28472124cc8b987b40db94c7c05388bd140691628f
.exe windows:4 windows x86 arch:x86

1cfb1bde4182a2a5b5fa927970da643e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocaleNameToLCID
GetConsoleCursorInfo
LZDone
RtlCaptureStackBackTrace
SetFileTime
AddLocalAlternateComputerNameA
GetNumberOfConsoleFonts
GetConsoleCommandHistoryW
SetFileAttributesTransactedW
FindNextVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE