68ac90ead24131a85c6235b659a0fb69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68ac90ead24131a85c6235b659a0fb69
Size

437KB
MD5

68ac90ead24131a85c6235b659a0fb69
SHA1

7cc8183c50385afb06516f9f87a7aadfcd1e5acd
SHA256

e75bf576a0890cd5ff38a61ea8b1daad0685cd57a07969893ba8a0671a4ff743
SHA512

763951297fefbe40f622b4d7a70bf1dbfc362a94a4066beb8ada006c8b638d5c9fd8a5396e0e29356211b848d7f1f9aa0623203bdbcf0853f74e4f9d25ad3cb4
SSDEEP

3072:GWar1hfdyokVd2yF2kr00DDwmimjguO+4yGXKJ9wa+v6FtvC4u9CYOa60SDADeaD:GHhVyjRF2kr0PgznkAPdT57sSsQLH5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68ac90ead24131a85c6235b659a0fb69

Files

68ac90ead24131a85c6235b659a0fb69
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.ficken
Size: 91KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 51KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icon
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE