62ab765c63aa7a42f4a67c7c38ad7940_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62ab765c63aa7a42f4a67c7c38ad7940_exe32.exe
Size

67KB
MD5

62ab765c63aa7a42f4a67c7c38ad7940
SHA1

dca37497a3afcf54dd1cfa8a13dd816680eec61c
SHA256

353ef454f9887e78d4673c931f0e68a3b5714ac22d766a3fa17b0faf9d1b0e03
SHA512

ccfbc3486c15f856a998a0f7a7ffbe0fe8e38cc68b56b658c77f82aa99fd784e2c1bd3af7d7a550fc0aa8afc4cafce4f8e7b2bf564f517ca3dad6ff7af229e5e
SSDEEP

1536:l20V7wdS0P79Jc78x+pu9fWWq53zgpu9fWWq53roCuBf6jd9Cm:lZ9wdV79JXMpu9fWWq530pu9fWWq53r/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62ab765c63aa7a42f4a67c7c38ad7940_exe32.exe

Files

62ab765c63aa7a42f4a67c7c38ad7940_exe32.exe
.exe windows:5 windows x86

b05c854936e80ba3420f36ed569f7216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
GetModuleHandleA
GetLastError
ExitProcess

user32

DefWindowProcA
CreateWindowExA
EndPaint
GetMessageA
LoadCursorA
MessageBoxA
RegisterClassExA
TranslateMessage
BeginPaint
AdjustWindowRectEx
DispatchMessageA

gdi32

GetStockObject
TextOutA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 2KB

.l2
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ