60f18c448f9a0bcbc334d46f9d94f986 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60f18c448f9a0bcbc334d46f9d94f986
Size

21KB
MD5

60f18c448f9a0bcbc334d46f9d94f986
SHA1

689573512629ddaefc10f6cb2ffaa0be737163f7
SHA256

9273663472553b7da176b0cf5b9b7239c13748a592f5f788f6b11f7fa5519f30
SHA512

6f45de9fae820e5b3cb76c379b511367f09da3a754adb44342c8a5814d6c7f7b269fe994fe3274bc38581dd7ce60af4638a10f910145d127304b1f38250d7af9
SSDEEP

384:fOUiUzhWcHkG0W/8AoWVkLNPbYafD2c/44Yx1DxWfymWSj:4OhWcqAzkLNpp44YX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60f18c448f9a0bcbc334d46f9d94f986

Files

60f18c448f9a0bcbc334d46f9d94f986
.exe windows:4 windows x86 arch:x86

1e0cd9bb60c14129fcfcc10e2949423c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
wsprintfA
MessageBoxA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ