064fb59ed5b43bac23aff647443ba7be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

064fb59ed5b43bac23aff647443ba7be
Size

123KB
MD5

064fb59ed5b43bac23aff647443ba7be
SHA1

e2076d0fb5eb61b08da9d0ee129654fe322e9b92
SHA256

e4903bbefb871cf4d0c42a639e2d539ed2cb68fa37589148d759f7421d3888e2
SHA512

b74e954bee05be5f757db73609a420abced8898d5f1fbc85fa87f4484d19299e633986523784ce8ca8db28f07164c46468aeceaa8023e41c6364d229e9a338ed
SSDEEP

3072:zsdJKVb/Ml4/3gMCTJvNQ9Y/5rzWKFwmKwI2mS6iltVdF8:zsdAVzQW3gNJvNQK/5rxFwmLI2ZpPVdm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064fb59ed5b43bac23aff647443ba7be

Files

064fb59ed5b43bac23aff647443ba7be
.exe windows:4 windows x86 arch:x86

6099e6690b1150565b271bdfe827f3d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_EnableScrollBar
ImageList_Create
ImageList_Merge
MakeDragList
ShowHideMenuCtl
ImageList_GetIcon

gdi32

CreateDIBSection
DeleteMetaFile
EnumFontsW
EnumICMProfilesW

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE