69ff7479967cd96ecba83852cce5ac2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69ff7479967cd96ecba83852cce5ac2d
Size

1.1MB
MD5

69ff7479967cd96ecba83852cce5ac2d
SHA1

e93f0162683726b5001811335dc5b8e35bf0ac48
SHA256

58f48ea4163d4043277b91f6641734b200ce79ce86d5da2c918e77ec33068885
SHA512

f89b590128b677fee899a5001632b5575da6339a4e90e0a3fa1d66b97ec0d0981b50dc9863ecd0a9c9c54ab8ce9a299f99559de5b858c7715d7abc13cd8cf39d
SSDEEP

24576:wJEJo8G2kHN9fNnHMG+aBJIGpjtop04/V2StO:h2dtHrfNnxbJ3pja0z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69ff7479967cd96ecba83852cce5ac2d

Files

69ff7479967cd96ecba83852cce5ac2d
.exe windows:4 windows x86 arch:x86

a41bf7eeab9b892bb619a0bd92b23bc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCurrentThreadId
GetCurrentProcess
GetSystemDefaultLangID
GetVersion
GetTickCount
GetCurrentThread
GetCommandLineA
GetUserDefaultLangID
GetCommandLineW
HeapAlloc
GetProcessHeap
DuplicateHandle
TlsSetValue
SetEndOfFile
UnhandledExceptionFilter
ReadFile
SetFilePointer
WideCharToMultiByte
GetEnvironmentStrings
RaiseException
FreeEnvironmentStringsA

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 835KB - Virtual size: 835KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ