68d5c780ffa9ec3bb708d61c3f11d81c | Triage

Sharing

General

Target

68d5c780ffa9ec3bb708d61c3f11d81c
Size

1.1MB
MD5

68d5c780ffa9ec3bb708d61c3f11d81c
SHA1

703db211b8d222d55a2ca6e85049189ad13ee094
SHA256

cb8901fc6ff7a743c831388dd2ec9b3a40c533bb7f0006326b7977cfe197232b
SHA512

6e3b93380da6376f483e88cb158bc283ee2a9dfbc7703cdb9277f3555f0b2058c17aea58ada2b2fc836c2234717a7c1727283743380bcbc6b02ede4bb1fa96bb
SSDEEP

24576:UWcaHU+kWOSN30kbro0clKguYmObaGNkeBP65S2c8:Ga0+kW5Z0kvo0AKghmObnkeBP6s2c8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d5c780ffa9ec3bb708d61c3f11d81c

Files

68d5c780ffa9ec3bb708d61c3f11d81c
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 596KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE