63d654764636a0504d2c69eaad08657a | Triage

Sharing

General

Target

63d654764636a0504d2c69eaad08657a
Size

48KB
MD5

63d654764636a0504d2c69eaad08657a
SHA1

f6ceb54acd70f17357fadc11b61ac174589043b1
SHA256

5129c182e3b0ce8d38bf6147ebabf0bda2642d47ec01a6e6d02ac7fd5f29f487
SHA512

cb123016ba7a77731edd73ed051561ff41c06dd5c2c8dc50ce50f18d85d3ed6f6dbd252a58755dd2430a279ef99d2938894ff8ed1573fd924ff5d4719e6339fd
SSDEEP

768:eYuWHp/CUq0jOjumabh2cb9MnqiB70PU857QdSN3yEpj4dqYZd8S+h5n3NnE7PDk:eCHp/CU2zmht9Mr2Ue7cSNiUjQDdb+hZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63d654764636a0504d2c69eaad08657a

Files

63d654764636a0504d2c69eaad08657a
.exe windows:4 windows x86 arch:x86

2def80e33554c9fa7ba605b5986c9ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 29KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ