67d07bc1a6b5925cc5e0e4885f066ed4 | Triage

Sharing

General

Target

67d07bc1a6b5925cc5e0e4885f066ed4
Size

5KB
MD5

67d07bc1a6b5925cc5e0e4885f066ed4
SHA1

c30e863e9683de6ff057d5dfbc816cf9fb9d1945
SHA256

32e8e7993746e4abffc60a23a2ae723c08460be91c2557df68ad313114f6ab7a
SHA512

749d1786da24f504b6d58dbb216111f3e1f8e64599833532bcbd12fd8160067fca0d14c1b2ecb8f2b949dfa80b3c9bc4eee8c8f1f04627faa255b38fa1669098
SSDEEP

48:i3Aa9uvY6uVg0dJ88RZR4gwrLOP5MYGqJXESlo/tfpMd1Ru1FsWTNQRRhBK0l9hL:Sdr88RtwYMYGqblYFpMBgs1i/cwTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67d07bc1a6b5925cc5e0e4885f066ed4

Files

67d07bc1a6b5925cc5e0e4885f066ed4
.exe windows:5 windows x86 arch:x86

14a2d7b58d3756be5c70b6c15220c9ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcessStop
CloseHandle
Sleep
ExitProcess
GetExitCodeProcess
CreateProcessW
VirtualAlloc
DebugActiveProcess
GetModuleFileNameW
lstrcmpiW
lstrcatW
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ReadFile
GetFileSizeEx
VirtualFree
CreateFileW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ