640c6767330c3ad415213d4429c8ebfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

640c6767330c3ad415213d4429c8ebfd
Size

16KB
MD5

640c6767330c3ad415213d4429c8ebfd
SHA1

cd55e3ea2c1da4ca99c3f749835dbcb1a722d7df
SHA256

28d80b758fb8d5f829eec96b19f2604e34656cdc03d60de888bbb7214610360f
SHA512

1e4329a259bab9e2a72d4e64f9427c49866eb38f7d7f65ce14966cfc08f7d96e5f0585bf7176b81f527b9aba40a3a14aa9293143e4646ef138df8cc1219f4649
SSDEEP

384:C1KJuZvTnpnqSN7BTIHeX75boe1lSa83QqNK:C1PnhqM7++dT1Zos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
640c6767330c3ad415213d4429c8ebfd

Files

640c6767330c3ad415213d4429c8ebfd
.exe windows:1 windows x86 arch:x86

8997a56e2059d2d944b46a22d3364d46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTapeStatus
GetTapeParameters
GetModuleFileNameA
GetCurrentThread
GlobalFree
ExitThread
ExitProcess

msvcrt

asin
acos
_CIlog10
wctomb
strstr
strtok
strtok

Sections

.text
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE