62cd814a550024b5cf4cd9c7bd4606eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62cd814a550024b5cf4cd9c7bd4606eb
Size

484KB
MD5

62cd814a550024b5cf4cd9c7bd4606eb
SHA1

c42b7f1662ad445f0b4e78ac68d6411aa1e586bc
SHA256

221765de3087cc5cb8c0bc037c448b57280e752aadaa62296fa7e8b3eb29ea7e
SHA512

71c4216737dfdc92e897ce77cf7a5e23096e697f39f6518b731a14e04a6680c6518bb02242f2d6413043ba5926ab8e2c76c2cf014911bb943411d0dc309505d4
SSDEEP

12288:tavZAQq54LqYEXoVH7PPk5OVvopjSqeUbbcEI:TiqYEA7PPfpoVSqVb9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62cd814a550024b5cf4cd9c7bd4606eb

Files

62cd814a550024b5cf4cd9c7bd4606eb
.exe windows:4 windows x86 arch:x86

5f6c7cb1f35f46df9f4806e5aaff19f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwProtectVirtualMemory
RtlDeNormalizeProcessParams

shell32

SHGetIconOverlayIndexA
SHGetNewLinkInfoA

kernel32

GetVersion

user32

GetDesktopWindow
GetDoubleClickTime

Sections

.text
Size: 474KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE