68c250861456f77692e395881d3ecf83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68c250861456f77692e395881d3ecf83
Size

484KB
MD5

68c250861456f77692e395881d3ecf83
SHA1

d4e1d0f61b0a75fc58cf6de6be05d52c40dbcb3c
SHA256

852d7ea5eb214005d34ea7a3353003751bc1bbd4505361cc5e4f8664d64f3835
SHA512

7822517ccd7401ea575e8eb7187554c1a99b3a6d5b4210ae898a297ed207c2ac3290662233e1f678ac7cb07531da623a1c2838ae3f5f6254ffa0e5de5ccdb00c
SSDEEP

12288:B8h7uPkAWgKw1spxc8PQLDvp4+rWDuJeu:B8pnhgQpxcaQLdrW4eu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c250861456f77692e395881d3ecf83

Files

68c250861456f77692e395881d3ecf83
.exe windows:4 windows x86 arch:x86

92bc20a3840d4dbfc279e1c0ed9ba036

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoSwitchCallContext

ntdll

RtlAppendUnicodeToString

user32

GetInputDesktop
GetMenu

kernel32

GetCurrentProcessId

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE