62c67990768d89f86636c9beaec02e0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62c67990768d89f86636c9beaec02e0f
Size

102KB
MD5

62c67990768d89f86636c9beaec02e0f
SHA1

077605569f159fde5636f1e33690c7abac9a4439
SHA256

56dfa4545df073bfb3867105a4ac111abc7fee041045e251cde55944796a02c7
SHA512

d3ca524c9f8c12d4eda4d472c878b7d14a37e4bf3ac69d5754e992e96d539684d818969b31645c9df34dc9048cf108b1fc15866588e8088fe26bf25d6e3a9a72
SSDEEP

3072:oqNJ5h91Cced7qjcF7obhv6OLrAKKFU4B:hh16Orh5AKKSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62c67990768d89f86636c9beaec02e0f

Files

62c67990768d89f86636c9beaec02e0f
.exe windows:4 windows x86 arch:x86

b56cfe5fb5d7ccb85a55027de0d18c46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetWindowsDirectoryA
ReadFile
MultiByteToWideChar
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
IsBadReadPtr
SetFilePointer
GetTickCount
GetCurrentProcess

ole32

CoInitialize
CoUninitialize
OleSetContainedObject
OleCreate

user32

UpdateWindow
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
DefWindowProcA
TranslateMessage
ShowWindow
GetMessageA
PostQuitMessage
MessageBoxA

advapi32

RegCloseKey
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ