04680ffe26306f7bdda45c29663d3e72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04680ffe26306f7bdda45c29663d3e72
Size

173KB
MD5

04680ffe26306f7bdda45c29663d3e72
SHA1

eff23f49d55171862b232344bbcc3bbe7d7263e6
SHA256

7350b0aad37e43e6417219a3451a1286286208581e15ee5a63889247ee1a2fea
SHA512

03baaf2d1187948815aecac988a14693aeeb3752bdc2730323303768f5ac7520019c06e311b384c240bb356454982c1d9b291a3837f38df1fdcf6b21ad5e0a9f
SSDEEP

3072:oMpzWeNoHTFqXwD5FInVOYubU9S39KfzESpX0XrRxYjOkKsNT0EDTc8+UcZfiVWv:oMpCuozsXa5FIn4YSUuwPECPNTX3ZcZn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04680ffe26306f7bdda45c29663d3e72

Files

04680ffe26306f7bdda45c29663d3e72
.exe windows:4 windows x86 arch:x86

6b80ef7bc8ec2602d99d121f6b46cb2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetErrorMode
FileTimeToSystemTime
ConvertFiberToThread
FileTimeToLocalFileTime
FindNextFileW
SetThreadPriority
GetShortPathNameW
CompareStringA
SystemTimeToFileTime
FreeLibrary
SetEnvironmentVariableW
FindClose
EnumResourceNamesW
LocalFileTimeToFileTime
RegisterWaitForSingleObject
GetLocalTime
SetCurrentDirectoryW
LoadResource
GetStringTypeW
FindFirstFileW
FindResourceW
SearchPathW

user32

GetCapture
ValidateRect
RealGetWindowClassA
SetCapture
ValidateRgn
ReleaseCapture
ExcludeUpdateRgn
InvalidateRgn
GetUpdateRgn

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 512B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ