62935d3394a50abf8c3d7dc4301d18ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62935d3394a50abf8c3d7dc4301d18ea
Size

25KB
MD5

62935d3394a50abf8c3d7dc4301d18ea
SHA1

b3c9110856f7cbdcd7e314aa0ba73899687a2cfc
SHA256

c648767a8bbba8fffe7eccfa29a6312e273ba736c48a0370dc7dfe00fa06bbaf
SHA512

2022fda7f3a8670a1ddf7da38a03563fea72fa42fa9e920de24018ec9afa667f415be9bacaf5b46c1a72ccfa1af7382ba8c4cb13244470e652b5a3a1d788e968
SSDEEP

384:nBY6PHyumSiJ2v4LxpI2yNW5ByKosEEy+/BILAKwp5dC93pNuUxzNbYGs:nBY6fs0EqBLpq5yGUhRTs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62935d3394a50abf8c3d7dc4301d18ea

Files

62935d3394a50abf8c3d7dc4301d18ea
.exe windows:4 windows x86 arch:x86

c1e6b9b4c72d7e5d2d0b7c4900fa90c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 19KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ