64e43a450b59a89f00950e01d82329cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64e43a450b59a89f00950e01d82329cd
Size

281KB
MD5

64e43a450b59a89f00950e01d82329cd
SHA1

9028158a26244f18038456d2530dc37802c7de12
SHA256

3a27e98e784a2ea9c374c92fe7c4e8fbff9145b8cc9afc0e46aec807bb909f62
SHA512

aaa262fc1aad439587cf539f72489d25b41b309b9fdfba0191b2d8188d579c95a9cdb8f0b0471b57786bd3ad0a6173586716af56604652d65b11dce9bcf4dda8
SSDEEP

6144:fw+ODw58qBloUmqBlofqBloa6XCnkP+6bWqBloDqBloRnkP+6bwnkP+6bd:fZOU58SlsSliSlb6X1+vSlySl/+m+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64e43a450b59a89f00950e01d82329cd

Files

64e43a450b59a89f00950e01d82329cd
.exe windows:1 windows x86 arch:x86

38c7ddda7d14716c59d59ee4a4ce377f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA

user32

DialogBoxParamA
DlgDirListComboBoxA
DrawStateA
DrawTextA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE