67b354c8472faa60222202a3a21d8815 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67b354c8472faa60222202a3a21d8815
Size

17KB
MD5

67b354c8472faa60222202a3a21d8815
SHA1

b9c1c281d16f8ac8505b7d3c41f51ded6f385360
SHA256

5db13118b9ba97fad4f7236603ee11f1421f2ac8421d29588374fe26c1a08e32
SHA512

49552233ec6c97ccb3db26c08cc841660ae85f179a7e53c3cafc358d8b1e981c4190da047cb7362e3d67a18d00fef6210aeab88c73209c50b9a20f19356b99de
SSDEEP

384:lsEh3HoOO9KOpbA0EICjw7OLy0yUCSJl2Ia9t1LmvUxYowWzZFW9lObtMPPh36:l5IO++e7OLvyUzD2IaAvUxYowTPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b354c8472faa60222202a3a21d8815

Files

67b354c8472faa60222202a3a21d8815
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ