0062cc861c9494e8d3680a62cdbbe168 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0062cc861c9494e8d3680a62cdbbe168
Size

20KB
MD5

0062cc861c9494e8d3680a62cdbbe168
SHA1

b985b98a10cf1182acba914af19529feb0abf1db
SHA256

fccd332b8ea213b17a57f6d6fde424a9d1f5b3e284361b71d1e126894238d123
SHA512

82fb58848e90678b32651598a5f5170b6d9d6c4553fdc0c7dec150539cab37d46d8af2bdacb968b439a4ef0e51d7fcc6a054ef5e19b1e8954b319ef5979017e3
SSDEEP

384:l1fCsBojwlFZERLy5ZPg85jNZnOlKr+HmerfEoOjiY/X3C:nOWAyfTcPHmCfEo0Xy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0062cc861c9494e8d3680a62cdbbe168

Files

0062cc861c9494e8d3680a62cdbbe168
.exe windows:4 windows x86 arch:x86

cc803f27dd937a1368768df2e06327e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
DeleteFileA
ExitProcess
FreeLibrary
GetModuleFileNameA
CloseHandle
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
UnmapViewOfFile
WritePrivateProfileStringA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ