60d5222bfdea3ff809303c5d26ae2ca8[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60d5222bfdea3ff809303c5d26ae2ca8.exe
Size

92KB
MD5

60d5222bfdea3ff809303c5d26ae2ca8
SHA1

db1a01b0a554b03e3b3e9dade6074a25504d9835
SHA256

50c1676d0268c66fc99e28279994e6c4dd23fba0c5981df979d7fbb3feb6a511
SHA512

dd26bf34d4330947c193186c10f204d0dd326be246999a31f8093eb7fb5bb63a3ab03155f76c14bcf6e712a543c9915d7700908556a54cd77da8b1265dd8d9ea
SSDEEP

1536:l62e3k0E4BApYpTpGMYuZeSeWjgLh+zlGIyPaCohwxPoA2E88aaHw7Koj4rtN3km:Pe3SWpTp+seSeCgLOlZKaC+j38aaHw7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60d5222bfdea3ff809303c5d26ae2ca8.exe

Files

60d5222bfdea3ff809303c5d26ae2ca8.exe
.exe windows:65535 windows x86 arch:x86

2431073e42d5039c74a56e0a5fa82985

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect
GlobalFix
PrivMoveFileIdentityW
GlobalFix

msvcrt

_except_handler3
__p__fmode
__setusermatherr

Sections

.text
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ