662a1f7f2fe70c157f71b6c45360c338 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

662a1f7f2fe70c157f71b6c45360c338
Size

76KB
MD5

662a1f7f2fe70c157f71b6c45360c338
SHA1

15a6d360ebbfecf11285696b44326a9c438cc3ec
SHA256

13c89f269477c5ad4e43a5711ee2a02b710c7b8f9293b45577824a395de8a092
SHA512

40760455219bfd9078bf1c0cb1aa458a7fb0459cb8dfb00337227a49ef67d8d14f6d70f0396488c36acbbe982e455ec9e58c9fb1ef4f15499b9dcd98eafbe644
SSDEEP

1536:76zFECRbvN497Y0ENKrHjjeghUgHtKI+ZfhEjEErxTWDTMqhGKYIZTET8x:769127Y0ENKD+0dHWEjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
662a1f7f2fe70c157f71b6c45360c338

Files

662a1f7f2fe70c157f71b6c45360c338
.exe windows:4 windows x86 arch:x86

2cb1a28cd16e629d42383a48fded4603

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemRegistryQuota
GetVersion
BackupSeek
SetProcessWorkingSetSize
FindClose
LZRead
MoveFileExA
GetSystemDirectoryA
GetTapePosition
GetConsoleDisplayMode
LocalFlags
OpenProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE