064ff4c68406065d3d93fa11f08b8d8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

064ff4c68406065d3d93fa11f08b8d8c
Size

41KB
MD5

064ff4c68406065d3d93fa11f08b8d8c
SHA1

0b25b2ae7c1e1cddf6856ac034093f9ab77db4cf
SHA256

7e2dc7fab05d79a3f976866f6738f0cd895650bb5e7422fd82c105eed5904be8
SHA512

ad23f4a2da106fa6e0602d998e1ebf331fcf9ab79a2d00090038ba57e4d62750ff1ecd7405f4e0ef2330008fcc050cca2c7048dc1ba6b0019332f5c2cf7b69a7
SSDEEP

768:SC3Hez0wTTMEMHqmglAKGBPR4C+ACwRlQREY7SvGu:hXrwTwEMilA1PR4zACbEY7SH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064ff4c68406065d3d93fa11f08b8d8c

Files

064ff4c68406065d3d93fa11f08b8d8c
.exe windows:4 windows x86 arch:x86

78ee973d59e9d5e19a9c386c2bc22836

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoA
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
GetStringTypeW

user32

DrawFocusRect
OpenIcon
ShowCaret

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ