74ec6f54b1bc3db2aeb0562080fb4996 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74ec6f54b1bc3db2aeb0562080fb4996
Size

17KB
MD5

74ec6f54b1bc3db2aeb0562080fb4996
SHA1

68c6bdb7d0a9e9ed158c393860b0ffb8379f0c85
SHA256

86a3720056f0ea5bf1f00659c35d881e45cb0d15378c6208630b4b6d4fc98ea1
SHA512

194d287d9bc56d834be241f9db36b3b81de760c747c4a8f6e22f0d26c6fcd70c9f876ecc5436e0c421cefad9d1ea50664cb89e1f6a15d8456b57423e6144dfae
SSDEEP

384:OFvoOJJpdcmZO2Zp+Nye8pqrmub8TyztsDN:OlompdoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74ec6f54b1bc3db2aeb0562080fb4996

Files

74ec6f54b1bc3db2aeb0562080fb4996
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE