63c77d07c095de19e059c41c52895522 | Triage

Sharing

General

Target

63c77d07c095de19e059c41c52895522
Size

136KB
MD5

63c77d07c095de19e059c41c52895522
SHA1

506c9a506374c5962bbc5011ff837f479f0782ec
SHA256

1ac73f707a2c04f591bab7f5bcb364899c408354b2d4742a71a332ed1ecf5fef
SHA512

7c211f1ca7e32b81cd0f42e3a42934b3fb2262987eb640a30d65c070e53c488a94fc282f9667dcb2b2548e2f77814b13d8c7157367bd731082f5fa35270acf11
SSDEEP

3072:6dDsmW3J31B7lrtZQO/Bh89R7vmHMM5HGEs:YgvB7lh20HMRXoGEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63c77d07c095de19e059c41c52895522

Files

63c77d07c095de19e059c41c52895522
.exe windows:4 windows x86 arch:x86

b7a58caf1735e7693120ebe3507e6fb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexA
GlobalUnlock
CloseHandle
LoadLibraryExA
VirtualAlloc
CreateEventA
GlobalLock
lstrlenA
GetModuleHandleA
FindClose
GetStdHandle
FreeEnvironmentStringsA
IsBadReadPtr
GetLastError
GetConsoleCP
ResumeThread
GetACP
IsBadCodePtr
GetSystemTime
LocalFree

user32

EndDialog
SetFocus
IsMenu
DialogBoxParamA
GetMessageA
IsIconic
CreateWindowExA
GetSubMenu
RedrawWindow
ClipCursor
GetDlgItemTextA
GetMessageA
CheckMenuItem
DrawIconEx

wldap32

cldap_open
ldap_unbind
ldap_add
ldap_delete
ldap_compare

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE