0607a02596295f8a897b06c60a510572 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0607a02596295f8a897b06c60a510572
Size

28KB
MD5

0607a02596295f8a897b06c60a510572
SHA1

efcf592c07a376236adfeffa354c3e5bcd50b94f
SHA256

863291eef08e88d2c70e0f5e391a305c13cc7f2c4ec82d13a61a671145500cc3
SHA512

724e3c591f13a13d7d6f14d46657111700f906a0a0a0f197e8d0f11f3be4c341be0384d9385cc9622ec837807ffde8acf1888b548346562439d5c44fd9255dff
SSDEEP

768:2Lp5GMxEPMbKqQd2GTR+0VscbT8XXYptzX3:2doMqP8KmGTR+0SXXiX3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0607a02596295f8a897b06c60a510572

Files

0607a02596295f8a897b06c60a510572
.exe windows:4 windows x86 arch:x86

37478893d073912c20fe3145407d1036

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetComputerNameExA
WriteProfileSectionA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ