32aad2dc9cbdfbce313db59d8c1255ef26fa7e919c13778eac3677746710c86aN | Triage

Sharing

General

Target

32aad2dc9cbdfbce313db59d8c1255ef26fa7e919c13778eac3677746710c86aN
Size

66KB
MD5

3939f0402457f042d9e8168d83e58cf0
SHA1

7eed4c34210e8eebe84392c47dcc576dd08c3b11
SHA256

32aad2dc9cbdfbce313db59d8c1255ef26fa7e919c13778eac3677746710c86a
SHA512

fd4be36239a76cd27d4e2175fe1bd980a99ac3c1a5271e71079eeae20b2c61a6dbfab33b0ed62ab0ca1226e9d4669e96973ab1615c78dfa172bdc3243516719f
SSDEEP

1536:kk3zkUlToo9kYmhjr1xarjHfYBf2OrP1h8DuiLS7v4:kT/o9kYkafHA1hr1h8DunA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32aad2dc9cbdfbce313db59d8c1255ef26fa7e919c13778eac3677746710c86aN

Files

32aad2dc9cbdfbce313db59d8c1255ef26fa7e919c13778eac3677746710c86aN
.exe windows:4 windows x86 arch:x86

29dba54b8d93994bd5fe3283670e80c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetCurrentConsoleFont
GetConsoleCommandHistoryLengthW
GetFullPathNameA
LZCloseFile
InitializeCriticalSection
GetWindowsDirectoryA
CancelWaitableTimer
CreateRemoteThread
SetNamedPipeHandleState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE