64c2631c63e2dda269239b97fe197ca7 | Triage

Sharing

General

Target

64c2631c63e2dda269239b97fe197ca7
Size

32KB
MD5

64c2631c63e2dda269239b97fe197ca7
SHA1

42eee889ee7dc32cc8aa440c9191e75e9e6052ca
SHA256

4ce4be54c5f08a11294988dc7d719fdaa8924a5152e2458858ee8c645d9a411e
SHA512

54bff8a9f7b7bcb1f3ab296d3392b1424daeffd097b7e7a9e9eae5504a89fe7e1a9f9ff458ed81540146bea2449e7d051ce0a64add810bf2e160bd13fd783019
SSDEEP

768:cDuKgYj4haOObykDPsSESO84DdDhPmSO7RnqS3h3e:13Yj48OOOouxdDcSO1nj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c2631c63e2dda269239b97fe197ca7

Files

64c2631c63e2dda269239b97fe197ca7
.exe windows:4 windows x86 arch:x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE