64b8d308d894f4ad5861fa123105931b | Triage

Sharing

General

Target

64b8d308d894f4ad5861fa123105931b
Size

22KB
MD5

64b8d308d894f4ad5861fa123105931b
SHA1

c09c601bbed8223e6f5fbf15e62a459ad720b061
SHA256

36da32872d5a6fa23ee556707043e5ed751a6685d7e9cef71ec896c334ceba42
SHA512

eb6aab7e34b3b8de179427636b3311ffb1e7f964ceb6dba41d96e5bd05d27535c760dc5f24f84d31f5b2cc010331e2044eeed0566c82e7533204918d0560ce39
SSDEEP

192:OaKHRvHcdWzg3uqWF0TCO4eG6R9IWD36JDSEOZ+kjyFLxcCDq:OvBzg+qm0TPy63tKZROBeRxrW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b8d308d894f4ad5861fa123105931b

Files

64b8d308d894f4ad5861fa123105931b
.exe windows:4 windows x86 arch:x86

b3f6369eea55bd172c36fe116d7deacd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_getch
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
printf
scanf
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ