623522149510a53e039a12faddda11b1b5f99be47d138781ce79b181af46532b | Triage

Sharing

General

Target

623522149510a53e039a12faddda11b1b5f99be47d138781ce79b181af46532b
Size

1.7MB
MD5

8397fbb0f072fe7af2024ed1f2405525
SHA1

f355d07ae184fb244125e29afcc8637e12cb0412
SHA256

623522149510a53e039a12faddda11b1b5f99be47d138781ce79b181af46532b
SHA512

f05188b063abb998729976747b7b9c414d09ea0ed5d978319506776c3f5841b0b6ae7282d923fd5f9e09b1e87dcfe31e7bb4df79c3ba73fb1ddd7866fc847040
SSDEEP

49152:cpFAWg/4zXBC3cKxItsXGiTM1FXpgIHjLDD:kjgQzRC3bHGiTM1FZBD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
623522149510a53e039a12faddda11b1b5f99be47d138781ce79b181af46532b

Files

623522149510a53e039a12faddda11b1b5f99be47d138781ce79b181af46532b
.exe windows:5 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

Sections

Size: 88KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dmoofvkc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jlmivgtp
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE