63ecccfbfa998b0ac08c476cc276b753 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63ecccfbfa998b0ac08c476cc276b753
Size

45KB
MD5

63ecccfbfa998b0ac08c476cc276b753
SHA1

f5f68ecace97363cbe2768d629836d7c9bfd93be
SHA256

32087ee51c8c8b82fe7cb8d650729ba51cf80418ee7902d2ac0b0653430cc910
SHA512

0e26e76e943bf6d9419a7e92d58afaf2775ea247d95b3fe56702d3b311a7faddd28f78ca22f2f1ca2e8bf7007619b7a0fc9375cd3c33cbe252a2b235a8a159ee
SSDEEP

768:I3G3G3q3b3o3WCQKLK7zOLO6mfWiCBaGN31TV96CaeF6ZCOPalJBtjwCpkDZrtRs:I3G3G3q3b3o3WLKzN67GN3XCZsBTCVn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63ecccfbfa998b0ac08c476cc276b753

Files

63ecccfbfa998b0ac08c476cc276b753
.exe windows:4 windows x86 arch:x86

c0d5a15991fbbee70da0f6fdf7e75a36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
GetVersion
GetTickCount
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent

user32

wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
EqualRect
GetWindowRect
IsWindowVisible
GetFocus
InflateRect

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE