64b84a53b271399d057dd1a9956fd85b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64b84a53b271399d057dd1a9956fd85b
Size

100KB
MD5

64b84a53b271399d057dd1a9956fd85b
SHA1

492fd2e1d47b5edaeb7e54a863d625c125661302
SHA256

5e8c30d53f2f73e7d07f07468cf2f52d7a385803cc2eb0ac35f68d1dd45ba6c3
SHA512

3bc394d97db0d8efe9b737fe6b2f64af4537d97648c845112c20ad9e595dad001e263d1db157c29c6a338cbc7cb6cd0269e46d48d4ca1ae36f226ca7deb7cd62
SSDEEP

1536:ev+FuUXK2bzBTek52BfoQmZvPxoPNTlzzBqem:AouUXK2bzBTek52Jovv0rzzBqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b84a53b271399d057dd1a9956fd85b

Files

64b84a53b271399d057dd1a9956fd85b
.exe windows:4 windows x86 arch:x86

5b10963e4c46793be9da1c2d16589dc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
FillConsoleOutputCharacterA
ReadConsoleInputA
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
CreateFileA
ExitProcess

user32

SetWindowPos
SetActiveWindow
SetFocus
LoadIconA
LoadCursorA
RegisterClassW
ShowWindow
DialogBoxParamA
CreateWindowExA
GetMessageW
TranslateMessage
DispatchMessageW
GetMessageA
DispatchMessageA
MessageBoxA
CharUpperA
CharNextA
DefWindowProcW
DefWindowProcA
PostQuitMessage
IsZoomed
FindWindowA
GetWindowLongA
SetWindowLongA
IsDlgButtonChecked
EndDialog
RegisterClassA
LoadStringA
CreateWindowExW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueA

comdlg32

GetOpenFileNameA

gdi32

GetStockObject

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ