60fcee1d5384b124d84185e3a29c9770 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60fcee1d5384b124d84185e3a29c9770
Size

211KB
MD5

60fcee1d5384b124d84185e3a29c9770
SHA1

4b4dedf40b52b0925a0b03bc1ae21741d6a9d6e9
SHA256

83fd2fe85a56da76fe10ecb474207df7fa21cc78efe0b616f8bbaf0a0f3929dd
SHA512

5d16d683e3e82c2ee00271b779950b75f14007d8f96f11ddbc6fa6e61d0b1fa7fbf7c0ef47ff1f8b53c1c1cc01e9ffaafe21fec47c235132f2cd35d8a0d5a6bc
SSDEEP

6144:cycESbIbx4oJP5Ancts+vYL0z2nk9XzSV:yESbI1knc/vY22nW2V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60fcee1d5384b124d84185e3a29c9770

Files

60fcee1d5384b124d84185e3a29c9770
.exe windows:4 windows x86 arch:x86

75f3047bc25b41c12a9105756e6b8f39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocStringLen
RegisterTypeLib
VariantCopyInd
SafeArrayGetUBound
OleLoadPicture
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SysStringLen

kernel32

LoadLibraryA
VirtualAllocEx
MoveFileA
GetThreadLocale
ExitProcess
GetModuleHandleA
HeapDestroy
GetACP
lstrcatA
IsBadReadPtr

gdi32

CreateBitmap
SaveDC
GetBkColor
CreateCompatibleBitmap
CreateDIBSection
CreateDIBitmap
GetTextAlign
SetTextColor
SetBkMode

comctl32

ImageList_DrawEx
ImageList_Read
ImageList_Destroy
ImageList_Draw
ImageList_Add
ImageList_GetBkColor

user32

ReleaseCapture
CreatePopupMenu
GetMenu
RemoveMenu
RegisterWindowMessageA
KillTimer
ReleaseDC

Exports

Exports

_mvWtGIOjTa46d
_EsIEYTg2svF65n@20

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 197KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ