64fff75a307e0a5673b0b61eb6c41c7461213e13fceab57c4c91cce05336baa0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64fff75a307e0a5673b0b61eb6c41c7461213e13fceab57c4c91cce05336baa0
Size

99KB
MD5

56e92ba18a6a407aad45643438eb6da5
SHA1

560e07819b0d0b2e07ceae1b8de7affd4821d408
SHA256

64fff75a307e0a5673b0b61eb6c41c7461213e13fceab57c4c91cce05336baa0
SHA512

35f6cc34084fd8c022c2dc02b200f2ed582d9a628f3257ec3e29e7c97431e96f5a5ee7103b5bcc53c744ead086f8814f2d0dd11075307603c9bfb4d9ef701a0a
SSDEEP

3072:baUB5umjOM+ayZ/g4f24YBuwTvAFMy3JtaoSbqUQr:bacrCMi1V3auwTvheeoSbqUw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64fff75a307e0a5673b0b61eb6c41c7461213e13fceab57c4c91cce05336baa0

Files

64fff75a307e0a5673b0b61eb6c41c7461213e13fceab57c4c91cce05336baa0
.exe windows:4 windows x86 arch:x86

adef1b3638dd8be3f23b10adda9e824a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
ExitProcess

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegEnumKeyA
RegEnumValueA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegDeleteValueA

Sections

.text
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ