065f477487d68ba71e54f93ca6206d4c | Triage

Sharing

General

Target

065f477487d68ba71e54f93ca6206d4c
Size

76KB
MD5

065f477487d68ba71e54f93ca6206d4c
SHA1

be0b38af001cf5260ea5d991d2959be56baee228
SHA256

18a5e25c8d81e7c9cc3a668481c4e21e58a3088a123f1eedc1838f842fcc884b
SHA512

070cf16d199dcb224686a8bed28647e159cf92cdc6ddff40041aaefff1575c7b25a3e0ff43428996e6568959961fee05294c04fb8ccf5521f4aa351877bf9423
SSDEEP

1536:OhhhhgkzmdJEaD2LPfll6Rb4TE1dmcdh5JOdapHIcyfDuQGpjVrs2ryrd1vUQuq6:Mmxs3ly4TErLUa/Iu7Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
065f477487d68ba71e54f93ca6206d4c

Files

065f477487d68ba71e54f93ca6206d4c
.exe windows:4 windows x86 arch:x86

d67bb0671e968d43199ce0343d00fbc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DuplicateHandle
GetCPInfo
EnumDateFormatsExW
DisconnectNamedPipe
ExpandEnvironmentStringsW
GetStdHandle
SetConsoleScreenBufferSize
GlobalAddAtomW
MoveFileW
GetNumberOfConsoleInputEvents
InitializeCriticalSectionAndSpinCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE