065cb3f73eced424e2fb65ddf27d8f6c | Triage

Sharing

General

Target

065cb3f73eced424e2fb65ddf27d8f6c
Size

482KB
MD5

065cb3f73eced424e2fb65ddf27d8f6c
SHA1

f9f107e2a85b022137a47086f1281b74609cfbc2
SHA256

6b1925a4e46c0ee657567aac483e6193bf1b7a64bde80a853e5af606087baf70
SHA512

18204253e6c8eb1298e6328f39ff2b13c0ed3f5187e7760542acf42c03dee46bbe29c9aa6d64645fdf730f6381b5e6153a6e73acb681abe279f79592c522f072
SSDEEP

12288:nTVv/uRJTCYuDWv+21xJAwAZ35xaGFujjnt59KwfUCr9W+qP9zuMRwNFoTl:nT1uTTCJDwZ+SbHnt59Kwfhr9czXwNF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
065cb3f73eced424e2fb65ddf27d8f6c

Files

065cb3f73eced424e2fb65ddf27d8f6c
.exe windows:4 windows x86 arch:x86

43fe0af50edd36354e48b5dd01d1cfb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
__dllonexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
_wcsdup
_EH_prolog
__CxxFrameHandler
free
wcslen
??2@YAPAXI@Z
wcscpy
_onexit
??3@YAXPAX@Z

kernel32

GetModuleHandleA
WriteFile
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
ReadFile
GetTempFileNameW
DeleteFileW
CreateProcessW
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetStartupInfoA

user32

MessageBoxW

Sections

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ