604084d8f3518592e4ae2b42ddd28642f33f9f0d693be6b555c1c4b2377ce92dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

604084d8f3518592e4ae2b42ddd28642f33f9f0d693be6b555c1c4b2377ce92dN
Size

31KB
MD5

9be71d741f14f3e640ac3c50b2e98240
SHA1

eea43f8b11d1d048e4098dccf216029cafcb6f63
SHA256

604084d8f3518592e4ae2b42ddd28642f33f9f0d693be6b555c1c4b2377ce92d
SHA512

f43022929af6d98cc26928cd35bf1601ec47bf5de7adb4c31c6c6c6b3a30ca2e53c0d2b439a44d2e9cb80210e58c98d6f6f7e1291416cc67e8a51e92e39727ec
SSDEEP

768:pgyEi4xGvf2oEXZqIZtI9tdCIJmv9Cm+vQhvUnaxLtPNVd:2yEnxwf2t5QCaqQIvLxLHVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
604084d8f3518592e4ae2b42ddd28642f33f9f0d693be6b555c1c4b2377ce92dN

Files

604084d8f3518592e4ae2b42ddd28642f33f9f0d693be6b555c1c4b2377ce92dN
.exe windows:5 windows x86 arch:x86

866559c5e96c7228dcb543b5e8a7c37a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_controlfp
_except_handler3
_cexit
_XcptFilter
_exit
__p__fmode
_c_exit

kernel32

GetModuleHandleA
GetCommandLineW

loadperf

UnloadPerfCounterTextStringsW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE