62b44994a8c98fe6317f81ff5eed64ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62b44994a8c98fe6317f81ff5eed64ad
Size

57KB
MD5

62b44994a8c98fe6317f81ff5eed64ad
SHA1

2910ada98194af949c58b44337bbaf10c05e56d8
SHA256

49f30c347831620b8673eafd965a4e8c28526407c6dd658f4c380ea28c4d06aa
SHA512

cd0b402da199ac04c8ca3b1b95ce5a6fdc40fefdfe06b276efdde60d8d06cbeb1e66b15ca51ff79bf1ec1e2adeb54bae19478b4fc0961b198edb429269112d48
SSDEEP

1536:IPLc+KTfvmT/bwMidTM9grsquK9968AMgyISCMd:3+KTf2bf849GHdv7gFNi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62b44994a8c98fe6317f81ff5eed64ad

Files

62b44994a8c98fe6317f81ff5eed64ad
.exe windows:4 windows x86 arch:x86

755c135a2624d18bce97840797c4d8ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocalPrimaryComputerNameA
GetProcessIoCounters
IsValidCodePage
GetLogicalDriveStringsW
GetConsoleAliasExesLengthA
GetCPInfoExA
GetEnvironmentStrings
FileTimeToDosDateTime
FlushViewOfFile
BeginUpdateResourceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE