591d9a40aa4395e8e6b41c1b7cff7632145ac62f0191733d2d315376ba60e238 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

591d9a40aa4395e8e6b41c1b7cff7632145ac62f0191733d2d315376ba60e238
Size

63KB
MD5

c6ecc275fa214ec1a40e577c4a9a836c
SHA1

8da19e3cbb8cb9617a81e9b21435da9023ce569e
SHA256

591d9a40aa4395e8e6b41c1b7cff7632145ac62f0191733d2d315376ba60e238
SHA512

eb1a3c5718750d33906c95f84c20ba31ef018fcda1d3c2ad96c003e1c26776f9395db7c8800b7f8391dcce8dce7f713040c510244111eaa5874e1719c74b4725
SSDEEP

1536:z75xDqVE9TsjLn8vLYye8G9LFG+rVVTMVDARe2TG:hpqK9T+L8vO8G9L/VhaA0EG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
591d9a40aa4395e8e6b41c1b7cff7632145ac62f0191733d2d315376ba60e238

Files

591d9a40aa4395e8e6b41c1b7cff7632145ac62f0191733d2d315376ba60e238
.exe windows:4 windows x86 arch:x86

12801901689629eba7073a1c3aa9acdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsSystemResumeAutomatic
ReadFile
HeapCompact
CreateEventA
SetThreadPriority
GetConsoleAliasExesLengthW
ReadConsoleOutputAttribute
RaiseFailFastException
VDMOperationStarted
GetNamedPipeClientSessionId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE