23006724e5eb38aac4407199a839d1d97c9eab39058047976394516e1f29e045 | Triage

Sharing

General

Target

23006724e5eb38aac4407199a839d1d97c9eab39058047976394516e1f29e045
Size

2.7MB
MD5

d857559bd3e0510979c6b04f89cff7dc
SHA1

d751fc09f805f364950b659ac3fdec0a8df59fa2
SHA256

23006724e5eb38aac4407199a839d1d97c9eab39058047976394516e1f29e045
SHA512

69e6398503d8e47a36db8ec1f83d6040513256d3c73d036d5e9f5a24e8d21663caac1ee577eda4b3afe0706c8bfd414b19aa60c25c9dfe81effa46591a2335ba
SSDEEP

24576:CSiNAmk0GkkJXMfZllBBbOCqfKyWCvytWeMQV2fKh+o5VapJchnyfx9EaVP4fnqw:7iNAKAXMP5WU/RNhnwyRzfoHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23006724e5eb38aac4407199a839d1d97c9eab39058047976394516e1f29e045

Files

23006724e5eb38aac4407199a839d1d97c9eab39058047976394516e1f29e045
.exe windows:4 windows x86 arch:x86

2eabe9054cad5152567f0699947a2c5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

Sections

Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xbfyaxyj
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsnnxqgh
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taggant
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE