67a93dab534d8a164ee3432d1c229f42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67a93dab534d8a164ee3432d1c229f42
Size

510KB
MD5

67a93dab534d8a164ee3432d1c229f42
SHA1

a30a05370e9e0e081e21c23235668699c372ef4b
SHA256

e2c341329014cbc7d194c5f2ff0865472a2c0987f31ef71949adc1d6fb4119d9
SHA512

59b758e5724e438cd8876f165abd7dcfce2a43fdd47145a30b2d9b1fe9fb78fbdcf306937323893dab93f85831597d0bc302eb890b73900ba23b63bab4878203
SSDEEP

12288:dGJwYx93qLAC8eyePSV3JxEj7BnnLDzH/SrJ:dGX3a1yePSvxKnfjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67a93dab534d8a164ee3432d1c229f42

Files

67a93dab534d8a164ee3432d1c229f42
.dll windows:4 windows x86 arch:x86

3c979da68d1e85ac9fef388cccac362a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileW
Beep

Exports

Exports

mbpgq

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ