686343ceb6cd406e74a6e945d033d0357e4fa3afbc3cbfa7443e8ea17e091123 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

686343ceb6cd406e74a6e945d033d0357e4fa3afbc3cbfa7443e8ea17e091123
Size

5KB
MD5

223f0254f5e281658a0c175eb0333945
SHA1

1ce0f8f3e05f509a0cfa9fd358d13c93089053ec
SHA256

686343ceb6cd406e74a6e945d033d0357e4fa3afbc3cbfa7443e8ea17e091123
SHA512

a1db6003e651c3f6b0bd4e751e66dbc11bb68d395a91a785c0794d091fd58a5364ffff5ee48b3e2e38587c597740e2ab127fc07e8d21507f875d5a57613fed1c
SSDEEP

96:RiSpap96NfOwFxZ3AIeXFWzj3+OWVUdMG2bKm:cdENGwB3AIeXFWXuOWGBq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
686343ceb6cd406e74a6e945d033d0357e4fa3afbc3cbfa7443e8ea17e091123

Files

686343ceb6cd406e74a6e945d033d0357e4fa3afbc3cbfa7443e8ea17e091123
.exe windows:5 windows x86 arch:x86

172a6440b3152d86a4392d15946c54ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

winver.pdb

Imports

kernel32

GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadStringW

shell32

ShellAboutW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA