1d68a620f7ea63ab8209c7d77669754f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d68a620f7ea63ab8209c7d77669754f
Size

414KB
MD5

1d68a620f7ea63ab8209c7d77669754f
SHA1

2fe84df2b5aab2ab01e0248553caa957957b62b3
SHA256

03d100424e38afd339db452770ad7c676adb898f8c66fca8677f398e3bbce53e
SHA512

59ff6d9e90388e19910e72b7cc693af7e8d98b40c079580259a792b961acdb3b12e95c30278e44dfc429b2a01c5090b485d984e924b59d1fdff3430cfd48ca7f
SSDEEP

6144:6ZhQx42/7MuMVRGP25TUjYwXRTasrr0kGuUOl6mw:6kjMuOIP25Ta1q7ROcmw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d68a620f7ea63ab8209c7d77669754f

Files

1d68a620f7ea63ab8209c7d77669754f
.exe windows:6 windows x86 arch:x86

35807dcde258f88fa3ce5c21adc607fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

LoadStringW

Sections

.text
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ