63d5fcb95882b03962defd1f851296d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63d5fcb95882b03962defd1f851296d8
Size

21KB
MD5

63d5fcb95882b03962defd1f851296d8
SHA1

e1e387647d168b47b68f694c38983719c6371fb3
SHA256

f4c650e89ab2d905c142f7f1012793425cc6c1739917b5fae769c5c880eac389
SHA512

b83f88d27bcada0066b18b970661a51f6415830925a387864acd61670168cccc004effed819932de679c9d7f04305de58ff7ed09be8b17c37a44ad215690c27c
SSDEEP

384:ptpszTxUb7NFs2IKOenAiTznEEmPtyJeB+9nA5joL9sS8w+c9awxYM5Gp:pHs/Kfs2k1+bRmPgJq+9nA5Mv58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63d5fcb95882b03962defd1f851296d8

Files

63d5fcb95882b03962defd1f851296d8
.exe windows:4 windows x86 arch:x86

515e91e3e116beabecdd71932774483c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetReadFile

Sections

.text
Size: 20KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE