68dc59c7f4b3921812a4e262cd81612f | Triage

Sharing

General

Target

68dc59c7f4b3921812a4e262cd81612f
Size

480KB
MD5

68dc59c7f4b3921812a4e262cd81612f
SHA1

b3e26e34f351d65d97eac1d80b6ac6d2b248e801
SHA256

fbc43a5ed35e82ef9f9ff05fe9913f84bc3f563e6aac6861b37cb42f04917102
SHA512

599f06f3b2dd07cf6844f10106e2f8b5b0cdb7ea61802b3d4b840aac43a1daeb6b2d15cdac7e01d0c458b058effeb58785419d791754c3b75a5e4d50acd9b3be
SSDEEP

12288:BOLLLLLLLLLAgLLLLLLLLLVHLLLLLLLLLuGaqLLLLLLLLL6LLLLLLLLLzLLLLLLt:ILLLLLLLLLnLLLLLLLLLZLLLLLLLLLug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68dc59c7f4b3921812a4e262cd81612f

Files

68dc59c7f4b3921812a4e262cd81612f
.exe windows:4 windows x86 arch:x86

3e51a9aaa7e6ea82ac8977565411d13a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize

kernel32

GetLastError

user32

GetShellWindow
GetCapture

Sections

.text
Size: 476KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE