062cc19109bc4a353404d16e9571c746 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

062cc19109bc4a353404d16e9571c746
Size

84KB
MD5

062cc19109bc4a353404d16e9571c746
SHA1

8d250e268bae56479645578111a1c504a9809cc4
SHA256

790e00fda5321704f31d376c3e070b1bd510b8db0289bf56712a61d6d00fa64e
SHA512

d9e4d952183fafdc3dd16770099057f6905da423cbcec9760d9212f407ef51ce630732749b502ade8d9b20d509242965fffe1d54b6896bc5314a2341f964e848
SSDEEP

1536:b/neRC5/wmroN04LYWC1CblMCn5uDI6tlRh7gZVv2MAH6+gwa3r:H5omrPkounIsYRhcGMzwab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
062cc19109bc4a353404d16e9571c746

Files

062cc19109bc4a353404d16e9571c746
.exe windows:4 windows x86 arch:x86

796b10f599be0ee9dcf6cd6f77a3794c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess

user32

DrawTextExA

gdi32

AddFontResourceA

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoCreateInstance

comctl32

ord17

Sections

pec1
Size: 22KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE