081b4ef8bbca773bffd1d2192fa469b1b34beaff5a7b70c6016301187c4612f6 | Triage

Sharing

General

Target

081b4ef8bbca773bffd1d2192fa469b1b34beaff5a7b70c6016301187c4612f6
Size

2.7MB
MD5

f5ac97bbb7d4d572e02edfaea58cdda2
SHA1

10dbb869de71d95142f379a5bf7fbcdf21e75bb2
SHA256

081b4ef8bbca773bffd1d2192fa469b1b34beaff5a7b70c6016301187c4612f6
SHA512

67aa593110980a78b20cf70c54d022af4ff844ae0764f79e85327ab07d5ba6decfd26d43fedadb723c0037c648ede81612a68af785633e9585db256f6c46b8f2
SSDEEP

49152:eB3kQMzhM43ocJrqBNGIO+64cFBVq72kBOoxA/m:k3kQMzhP4cJr4NUn4yPdUSm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081b4ef8bbca773bffd1d2192fa469b1b34beaff5a7b70c6016301187c4612f6

Files

081b4ef8bbca773bffd1d2192fa469b1b34beaff5a7b70c6016301187c4612f6
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wvemjduk
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ockpcsyk
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE