640e035e648011f5c3b0cd5c808a402a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

640e035e648011f5c3b0cd5c808a402a
Size

50KB
MD5

640e035e648011f5c3b0cd5c808a402a
SHA1

35d0160865ef1fa2c656b8dc7e50bc853f85c3c0
SHA256

cf2da9cc49ed3453375eb054ad5283ec016218b281ede04e1e1a2400ecfbcb8f
SHA512

69913e1a8e73de128c8e893f645b7216780757304657cde63a20416963b70dc48c0919a36f57df96513cbca0e4cef5e01524a03e2348380bdb67bbf2e14c1cec
SSDEEP

768:4PKrU5MxWV6GCmFvL6u8Udz90q9mpr5UTAJdfR7AoQaUMck83jN9ypn:8K5Vi9mJUNkpr5UAJfWajck83jNEpn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
640e035e648011f5c3b0cd5c808a402a

Files

640e035e648011f5c3b0cd5c808a402a
.exe windows:4 windows x86 arch:x86

cd9ef165d9f7496e37fa71580a62de6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
VirtualAlloc
VirtualFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
GetModuleFileNameA
CreateFileA
SetFileAttributesA
lstrcatA
lstrcpyA
GetSystemDirectoryA
GetTickCount
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
CreateProcessA
GetTempPathA
GetFileAttributesA
ExitProcess

user32

GetCursorPos

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newsec
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE