68c152bcde97b8277ff6537629f785ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68c152bcde97b8277ff6537629f785ba
Size

147KB
MD5

68c152bcde97b8277ff6537629f785ba
SHA1

3bf20610f15b7f8efd8a32c6d4f4fb824e7f9276
SHA256

62fc7a2b9f82c2aedc0a85046b999bbb93bbf788be447b859d24ecccc3f9d05c
SHA512

670383bb258a9dd05f8093acf4262df489cb9d4b3de0782f2d37bd399ddf3aa6e8d38606010b36d41f06e347007422e2df8b4149254501fa150472360c94b73c
SSDEEP

3072:tyXeyNcbgpMHfoCk75Z2pOKRMV9vE5+fck17Eni:MXpIoC+X2IX9cGD7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c152bcde97b8277ff6537629f785ba

Files

68c152bcde97b8277ff6537629f785ba
.exe windows:5 windows x86 arch:x86

22037eb99b9816f84eb9f427b64e7b46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA
PathStripPathA

kernel32

lstrcpyA
lstrlenW

Exports

Exports

?ConsoleInfoReg@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ConsoleSetRect@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?SequentialAccessTo@567GPAUHINSTANCE__@@U_COMMPROP@@?F

Sections

.itext
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ