b58162d29238dda53acec1f49658fc4271f22adc2b1f630441c87810a95efb18N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b58162d29238dda53acec1f49658fc4271f22adc2b1f630441c87810a95efb18N
Size

63KB
MD5

43d014dc948d453099d0ff6a18b48cb0
SHA1

0bcdf54b83dc2f733bf3c512f4f1a1bc30302f87
SHA256

b58162d29238dda53acec1f49658fc4271f22adc2b1f630441c87810a95efb18
SHA512

b82e8e549d4a56008bd7259a5789b570c21d374851fc351662dd5d2913e190e5d7a85ac82a30f404da43ba71c153ec16d1ec00b79d7ab21ca3b6588458af4660
SSDEEP

1536:JT5GeygDDJm0sqCIQJWcX2QI9m0pn9fOHttwTttrKC:JTkA00sOqX2QCm0p9mHtuzrKC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b58162d29238dda53acec1f49658fc4271f22adc2b1f630441c87810a95efb18N

Files

b58162d29238dda53acec1f49658fc4271f22adc2b1f630441c87810a95efb18N
.exe windows:4 windows x86 arch:x86

e1bab3a3e300a5185f6f5106fb41c2df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmp
RemoveLocalAlternateComputerNameW
PrivCopyFileExW
PssWalkMarkerGetPosition
IsValidLocale
GetConsoleAliasesA
FindResourceA
UTRegister
BaseFormatTimeOut
CreateBoundaryDescriptorW
InterlockedDecrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE