67c348793210cc2af1736b66db42a252 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67c348793210cc2af1736b66db42a252
Size

38KB
MD5

67c348793210cc2af1736b66db42a252
SHA1

34d1f4ad09ecabb9798e947ac71a7c831cc09707
SHA256

7dd8e72a40bae97d0f160352f71c717cf557f889b0cb20b68097b1929f0ba646
SHA512

b95d56dd7db1cce1c93df4900819cd05082659e0fc2defbdd4a00047dc7c2549db68e4f252a05621a0a6ea3dbf99830bd3f13b0c1dbe5706cc9899eda7dc8712
SSDEEP

768:Gl6YdPgepONVKoQNm5pTDibQkd4CBcD01IrW:xWVOD5QQGQkd4CB+GUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67c348793210cc2af1736b66db42a252

Files

67c348793210cc2af1736b66db42a252
.exe windows:4 windows x86 arch:x86

8bc2b06c4420b652f19d14fd3a807024

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

urlmon

URLDownloadToFileA

Sections

.text
Size: 28KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE