69d64fe9f420061dc0247e0bedc9a272 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d64fe9f420061dc0247e0bedc9a272
Size

44KB
MD5

69d64fe9f420061dc0247e0bedc9a272
SHA1

72fd56d51fc0330ad59b903095fa68b7bba0cb3f
SHA256

e86bab120edb150fa5b1cfe2b618bff574e286478ae01006e31592d1dbe7b689
SHA512

9dc79ee8748b93180a82f41f94f3d13145c4c0c16972cc44ca773e4c84580dee10119fb32197d51e723444726e500ecc53f64b55223c0c70bf2c8592503216a9
SSDEEP

768:AhwIcsihmBoGAiTsvGXyd07HYM0E36NOFUbtpjwJntHAC/7o2/z:Aw/mBMi1CEos6oubtpUJtR7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d64fe9f420061dc0247e0bedc9a272

Files

69d64fe9f420061dc0247e0bedc9a272
.exe windows:4 windows x86 arch:x86

c42bf4107481f4960a34f220d5944482

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

Sections

CODE
Size: 37KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE