062b58586c9e72e8806a30977b6d39bb | Triage

Sharing

General

Target

062b58586c9e72e8806a30977b6d39bb
Size

16KB
MD5

062b58586c9e72e8806a30977b6d39bb
SHA1

519f74b55a715d145805c968e9c638bd8a096708
SHA256

9f8c969a8882818a5a1abb2528ead5d528676dff6d5fd4e2f755bbf4b6a6b7c9
SHA512

1f49cc6d9ffe6295276146f88197396a4b6723cda866a5ca94e5bd922f5b2a87c9fa359aaa4594e83ad34ea0b47ccbc9cb508c0f96ee5ec073e8dd819ee234bd
SSDEEP

384:DKWotzUS5NxfBXDpUwYCRxM1DA5l1HSk59iC1+jPS+:DKjXHfBXC1Doj/9iCojP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
062b58586c9e72e8806a30977b6d39bb

Files

062b58586c9e72e8806a30977b6d39bb
.exe windows:1 windows x86 arch:x86

5b052913ad57def32d5cd816cef2f96f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetFileSize
GetModuleFileNameA
GetProcAddress
GetTempPathA
LoadLibraryA
ReadFile
SetFilePointer
VirtualAlloc

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE