64f62d01e68d9cea7d540f54ce77ba33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64f62d01e68d9cea7d540f54ce77ba33
Size

82KB
MD5

64f62d01e68d9cea7d540f54ce77ba33
SHA1

9ba8271b6ab2cbc0bf390b02fd62b22c150a2efb
SHA256

861824bf25161003894f4eb34f3f31e1b0449d7674146faa1e32d40493bf7fbd
SHA512

64e7a7c2e903427ed0180a5ac29de888e3686e80d40192e7a5d83a066530067d7cfa2bd5f135c02faef4dca0c8b3d72569a698f908e2d9f1998fd3884edefa51
SSDEEP

1536:HBobgFsmj4+YdMTDYFBKxb2pzRqZJC9Gjhf/MXpHuK3dYD8gmSz8qWzT64l49rXo:hobgCmUPnFBKhYR2JCOhf/MZHuKtYlAj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64f62d01e68d9cea7d540f54ce77ba33

Files

64f62d01e68d9cea7d540f54ce77ba33
.exe windows:5 windows x86 arch:x86

2540aeaa121a3a75219bc3fc88206756

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
CreateSemaphoreA
CreateEventA
GetVersionExA
GetStdHandle
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetStartupInfoW

user32

GetWindowDC
ReleaseDC
LoadIconA
LoadCursorFromFileA
SetWindowTextA
LoadCursorA

shell32

SHSetLocalizedName

msi

ord212

msvcrt

_wcmdln
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_exit
_XcptFilter
exit
_initterm
__wgetmainargs
_onexit

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ