dae526fd9c25220bd53e99a69e9cdf6e91efce8196cddb1bde5df47ca1225a25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dae526fd9c25220bd53e99a69e9cdf6e91efce8196cddb1bde5df47ca1225a25
Size

124KB
MD5

d815de3a96644c586363e575fb831967
SHA1

7cf483b0a0ce6ae9d931ee8e412a1fec89702d0e
SHA256

dae526fd9c25220bd53e99a69e9cdf6e91efce8196cddb1bde5df47ca1225a25
SHA512

b8150649c5390b2dfa6fed0d57f0ebd41c7d25a8f74f79edab2295d4c37505fbaba2ff89003dc2128b2333d3f9cc93a2ea88eba6626a4da88d005d4e469049f6
SSDEEP

1536:Bq0QqWHmTnhp+qrRu49fe70yyhyyKkOPg94rqDeYs/PVyFAt00rL2HBoxdE5z+uL:jQWLh4qrAeq0yyhyyKDPhe9uR0yyhyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dae526fd9c25220bd53e99a69e9cdf6e91efce8196cddb1bde5df47ca1225a25

Files

dae526fd9c25220bd53e99a69e9cdf6e91efce8196cddb1bde5df47ca1225a25
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ