69c150f493acda6878af308ae17819f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69c150f493acda6878af308ae17819f5
Size

3.5MB
MD5

69c150f493acda6878af308ae17819f5
SHA1

299cd1af5bfc61458982b4c0e86d35180d2d9f5e
SHA256

dcb441cbde8ce27b8e58fc3bc05f460b4e03024e2e6e02f77eb3c3089497bbf4
SHA512

a5fe2ece496387ed136dff1c792f49b78502124ecbedc69b623076132cdd8fc6c03e7d48a70644f75f33862c6d08d6ad24a3b41d8c027da0a17093ac79f4e2d9
SSDEEP

98304:K7GaYJriRsR3dh5eAxID5F54anh1lqKjCqtg2bTxRPSW:K7GVJwmh5DTan/4KjCSTTxtSW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69c150f493acda6878af308ae17819f5

Files

69c150f493acda6878af308ae17819f5
.exe windows:4 windows x86 arch:x86

123baf1bb8fe402df13739591f0fae05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

Sections

.text
Size: 47KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE