69a7e9d3a9ed2609d58310e76a062c4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69a7e9d3a9ed2609d58310e76a062c4b
Size

399KB
MD5

69a7e9d3a9ed2609d58310e76a062c4b
SHA1

39965a6de458e6f89760a74f57904d9d81249278
SHA256

71f79da085021302e128af39f9e9b36bc460debfefdd23d5b1dac0e136f5f424
SHA512

04dc5cd4086d46d82690ce0111217ea88729c39292f897de4e5186cb50002920eba6feefb668acab77219fe29b8e475efb5994fbdf362f0c346f6d0fb70f4836
SSDEEP

12288:XKQlrGTLJOGWjHyoxkw8ToRvec7pqVCI:XKQUTtsHykjW6vxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69a7e9d3a9ed2609d58310e76a062c4b

Files

69a7e9d3a9ed2609d58310e76a062c4b
.exe windows:5 windows x86 arch:x86

e9a3c50dec7ad04acc58afdd4c752832

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

RaiseException
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetCurrentProcess
GetModuleFileNameA
GetVersionExA
TerminateProcess
TlsGetValue
TlsSetValue
GetLocaleInfoA
GetACP
InterlockedDecrement
GetSystemInfo
SetEndOfFile
LZDone
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
RtlUnwind
ExitProcess

user32

wsprintfA
ReleaseCapture
PostMessageA
GetWindowPlacement
SendMessageA
LoadCursorA
SetCursor

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ