891f2308120593431afe592a489d6f63e7ffacfaa8f5310fb3e337a14d193232[.]exe | Triage

Sharing

General

Target

891f2308120593431afe592a489d6f63e7ffacfaa8f5310fb3e337a14d193232.exe
Size

5.7MB
MD5

2e66b8b60359f3df38d8a17105f2d04a
SHA1

003c3a2071b68654047657a741a5c00e3a5a5af5
SHA256

891f2308120593431afe592a489d6f63e7ffacfaa8f5310fb3e337a14d193232
SHA512

9fbc093e3b8a8c1e738741c7953563f3925ab169dc488815d57525804eef616e38f1f4b5cde57d682af8e1415a632674a47c60417c02c770451f6c07616ccb50
SSDEEP

98304:18/WRPxwuN5FnzkXNvxxbtdKC/bWVOOMk2su396ZVTT8ERNQcnv:7xwinnzopEC/bWkfk7BNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
891f2308120593431afe592a489d6f63e7ffacfaa8f5310fb3e337a14d193232.exe

Files

891f2308120593431afe592a489d6f63e7ffacfaa8f5310fb3e337a14d193232.exe
.exe windows:5 windows x86 arch:x86

d0699abeaae9638fad6ac167eed33aa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CharUpperBuffW

Sections

.text
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e4"
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mU>
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CbH
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ