62b23bc2068ef54934a419b5070145c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62b23bc2068ef54934a419b5070145c9
Size

76KB
MD5

62b23bc2068ef54934a419b5070145c9
SHA1

c6ac3af05c49cc3c55e34357f2dcc49d1a44d148
SHA256

11e3631f602a74a082f140b37fa7c8063eff5c08a0b79cdb5a1c363f04636c8d
SHA512

0646b187cbd91d91194d0922eaa711e04aff9c3ba2d6a7abb372a62d5e5405bfdfee7079cf22bd232a042f23b5546a44aff83a038bb34fe694e441be308767b9
SSDEEP

1536:T6PpRd+ZB1hwh1wDyTr+8WMEZBHuBdq29h/xkHqY/:T6xRSB1XUrZWMOHiA2XY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62b23bc2068ef54934a419b5070145c9

Files

62b23bc2068ef54934a419b5070145c9
.exe windows:4 windows x86 arch:x86

655d59a06b63635564d64d362e5fb11e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
VirtualAlloc
WideCharToMultiByte
VirtualFree
GetLastError
VirtualAllocEx
ExitProcess
LoadLibraryA
LocalAlloc
lstrlenA

user32

GetDC
LoadIconA
UnhookWindowsHookEx
UnregisterClassA
GetActiveWindow
TranslateMDISysAccel
IsWindowUnicode
CreatePopupMenu
CreateMenu
KillTimer
SystemParametersInfoA
TranslateMessage
CharNextA
GetMenu

Exports

Exports

G7vot1skE_25wL
Uy3fXO7mwG_G
QP_jmmZ
_uGExM9BH9yZy6@16
Zj5z7qGLanBMDq

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ