68dc6b823f55dbfe6a944e47771471d1983dc605dba1171875c93177f878cb8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68dc6b823f55dbfe6a944e47771471d1983dc605dba1171875c93177f878cb8f
Size

5KB
MD5

e6d06a8062027157af79670272efa45b
SHA1

13f68328ba4bae3ade4d689968cc3e8fb8dadece
SHA256

68dc6b823f55dbfe6a944e47771471d1983dc605dba1171875c93177f878cb8f
SHA512

d151e37ac73fe3d9294ff1dfbaa372541db0a3cbb6960120fc7e2fea121c9b39b8dbe4c149ae9a6ce00921f11c46445cb7257bacfbb46695f8ea97f4fb2a11e2
SSDEEP

96:5XtHQX5J1Vuq1m1FAQBbd01aTrg7174ortAoe:5hQXzzY3f9d01NJkort

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68dc6b823f55dbfe6a944e47771471d1983dc605dba1171875c93177f878cb8f

Files

68dc6b823f55dbfe6a944e47771471d1983dc605dba1171875c93177f878cb8f
.exe windows:4 windows x64

7dbe277aeb47b4d72e9b17f532e03658

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilOidNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ