1196b905168dd12c7fc1b9767b3b9244ce112e462ccec8bb28724820581999ca | Triage

Sharing

General

Target

1196b905168dd12c7fc1b9767b3b9244ce112e462ccec8bb28724820581999ca
Size

20KB
MD5

782f19ea6cafa42bb143a571ce734269
SHA1

8cf58a48bd43c54ae7900ef176ad159d9df4f83b
SHA256

1196b905168dd12c7fc1b9767b3b9244ce112e462ccec8bb28724820581999ca
SHA512

b34a69a49d80f1aaf7b2db51eafe451dd924e47ec4fbe2fe75360969a567fa3c702875c301958dbc40958c847a127035597cda14845d3edc5ab629ecf7b184df
SSDEEP

192:CCF1s32HEnyBh0CKFSQeYYq01IwqNrQXi1aiV8mZBdZDfSkz3I8xBmrHM4WsyyD6:CCLQ0Zaeve5KmlJfDwyyDO60h6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1196b905168dd12c7fc1b9767b3b9244ce112e462ccec8bb28724820581999ca

Files

1196b905168dd12c7fc1b9767b3b9244ce112e462ccec8bb28724820581999ca
.exe windows:4 windows x86 arch:x86

f5f0b6f382a4e83809fc8edff0fb3d38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentProcess
OutputDebugStringA
GetVersionExA
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

user32

ExitWindowsEx

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ