64fb9e18c72fbcad6880d1f03bfcaa69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64fb9e18c72fbcad6880d1f03bfcaa69
Size

159KB
MD5

64fb9e18c72fbcad6880d1f03bfcaa69
SHA1

6c21278c6980cf8ab8c7850e50b8956a89800d1b
SHA256

6ccaaeab5923eb284049cfc8a370ba1498ff3b9300d51c92bb3694ae829f1565
SHA512

ed608c67f26467af945857170e58950787985b96d545e2da8b1ffb1d001c3f792ee9f542c032a0b699fef008035bf3aac74f6b0a2364ce3eb9a55c5b2dfa9ecb
SSDEEP

3072:YfIsaVwYbUFxSaewNj5n8AjL3z8kV/Jk+etgXFFpinjzc6z+Q7u:YfIsrFp5n8Agh+FX3kc6KA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64fb9e18c72fbcad6880d1f03bfcaa69

Files

64fb9e18c72fbcad6880d1f03bfcaa69
.exe windows:5 windows x86 arch:x86

424ad7e95ce84a6cd26c7fce522046e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
MessageBoxA
GetForegroundWindow
FrameRect
SendNotifyMessageW
RegisterHotKey
GetDlgItem
RegisterClassExA
DrawFocusRect
GetTopWindow
TranslateAcceleratorA
FindWindowW
HiliteMenuItem
GetScrollRange
AppendMenuW

kernel32

GetModuleHandleExA
VirtualFree
SetFileAttributesW
GetTimeFormatW
SleepEx
lstrcmpiW
GetBinaryTypeW
GetTempPathW

Exports

Exports

?SetSystemInforma

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gff
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uyu
Size: 512B - Virtual size: 111B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dff
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kjf
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE