68ff2738f583b3df19b29e08cd0c63ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68ff2738f583b3df19b29e08cd0c63ab
Size

52KB
MD5

68ff2738f583b3df19b29e08cd0c63ab
SHA1

60787f48d6c51086ed9b6b4bf890f650646a540e
SHA256

cabb63b0f5a240aad6e62f9b1560dfbc4e8c8a614c67b027d0932e287a57ed05
SHA512

cc49f97a83c6c35c1b2ed6bd527ae9d03af9d6932bb7e7dc13fd695c02b6012d04c849136ecfb0eebc87e6359ed9288370190b4b8ea38725728704593a044204
SSDEEP

1536:ZCn3Utmzx8zrlPiSf5dYhSU/BL3r/XALdtUeLs:ZCnEtmzW3lPiS/K/JuWe4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68ff2738f583b3df19b29e08cd0c63ab

Files

68ff2738f583b3df19b29e08cd0c63ab
.exe windows:4 windows x86 arch:x86

b8dd9610f7f3c4e817e66f3501bf26f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

�0
Size: - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�P
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�@
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE