063067a6c4c74707a233de6b10f96253 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

063067a6c4c74707a233de6b10f96253
Size

42KB
MD5

063067a6c4c74707a233de6b10f96253
SHA1

ec0d18d360177d7fac5346167cae7c5b84b6766d
SHA256

c181dcbafe5423364032b080ca82479534b1c58aa7c8634cbb07017fed1740b6
SHA512

0e7b107dd0a43aeaca9a93b056558e3f3cd5623cce904f204e6a0e9fd081a2cbd090a1da5e83932e2e82327c8bc5fbb8b59cd6cce2e9ca3609b9cf1dd95904ad
SSDEEP

768:aCkwUWa2Asjxq8Iro26+EcpmKghdzC92kfuIYWJs:a4PMsjTIUuEtK0zC92kfuINJs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
063067a6c4c74707a233de6b10f96253

Files

063067a6c4c74707a233de6b10f96253
.exe windows:4 windows x86 arch:x86

36fb06462bbd480471c9bd23201596a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
GetVersion
LoadLibraryA
SetFileTime
GetProcAddress
VirtualFree
WriteFile
lstrcatA
GetModuleHandleA
GetModuleFileNameA
ExitProcess
CreateFileA
VirtualAlloc
CloseHandle

user32

CreateWindowExA
RegisterClassExA

advapi32

RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE