664b7d4ba319a0368ab9f022029e4d95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

664b7d4ba319a0368ab9f022029e4d95
Size

15KB
MD5

664b7d4ba319a0368ab9f022029e4d95
SHA1

dc38f33d72f5940a9a3683565adcccea7a5c9334
SHA256

b893876663e7534a9b395df7c9f4d4d9899c15832cda720b7992f436526494ce
SHA512

5fd34c41caa5fd14cc46d13bb89dc2d55cb3b44f2e083321a6fb9fc9358811694fd6319448f0326889048c71979980113b3d61813ac95efb1200c20e25557722
SSDEEP

48:6oXf5SCvLqEiH5dcGGZ5elV67C6jvE46AtqqzmpYvlbAHrxTCLBqR:pUGqEiZ6TZKzkciq2mpI52xGLQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
664b7d4ba319a0368ab9f022029e4d95

Files

664b7d4ba319a0368ab9f022029e4d95
.exe windows:4 windows x86 arch:x86

c494458029910d0ed6df63da0b05bbd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ