69b605d8a102a2c1543510b9d0b5a4f4 | Triage

Sharing

General

Target

69b605d8a102a2c1543510b9d0b5a4f4
Size

32KB
MD5

69b605d8a102a2c1543510b9d0b5a4f4
SHA1

73f2a1e904a0fb6cea4ee76263143bdfc2168741
SHA256

e93ad5311a32fb9c71aa67bc5bd65ba7eecc2ebd6ff1e108f7056b660b02028a
SHA512

e031abd2dc487a1ad6f27e338dbd15fa5795b877f6832d437842d72eada18fc36290f5334592e45017347701244a5afd9d1d524b52114e98e1e21c261c474751
SSDEEP

384:5QexTfeSivsAJjOYCjw1mljPedwqsQZVlCyetF28GFozF:3fejs0jT9sqsIOPtTGFoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69b605d8a102a2c1543510b9d0b5a4f4

Files

69b605d8a102a2c1543510b9d0b5a4f4
.exe windows:4 windows x86 arch:x86

322f7eb1ae96ac21e5fc103e012794eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetStringTypeA
DeleteFileA
CreateDirectoryA
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
SetFilePointer
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeW

user32

MessageBoxA

advapi32

RegOpenKeyA
RegQueryValueExA

shell32

ShellExecuteA

shlwapi

PathFileExistsA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE