fd6064afa687cb8c0ca6be3e9bdc1963 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd6064afa687cb8c0ca6be3e9bdc1963
Size

87KB
MD5

fd6064afa687cb8c0ca6be3e9bdc1963
SHA1

55c15254bf2d0d7260ab34fe58fc735dace558cd
SHA256

8183c41e63f08b921c886beff26a57bd5c49d629192286daf5c1a2b82b02dce3
SHA512

a9f736db200853ceb2f46f2633eb6d2883be2897b2d2437cfb61538078217b1e28c543cc6f4b8de22a9311f51b0f093be8e70ff8b69f0224c923c700090dc738
SSDEEP

1536:Ic7fVaQ5LJSm2bzSNBfeDd4MooWGKVCGq4ZWrKi:AIgVMBfM4ToWGtGq4ZwH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd6064afa687cb8c0ca6be3e9bdc1963

Files

fd6064afa687cb8c0ca6be3e9bdc1963
.exe windows:4 windows x86 arch:x86

c8a22636037281b8202c6e852906b5eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
EnterCriticalSection
GetCurrentThreadId
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapDestroy
HeapFree
InterlockedExchange
InterlockedIncrement
LocalAlloc
QueryPerformanceCounter
SetLastError
VirtualAlloc
lstrcmpiA

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ