64c36290a7f0a48a5d21af63300bf2ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64c36290a7f0a48a5d21af63300bf2ae
Size

460KB
MD5

64c36290a7f0a48a5d21af63300bf2ae
SHA1

fcafc8bd7089295c157a75fd5fc4c74b60f5887b
SHA256

ea6cd1417bd588a6a2d5295394cc884ec76e8765f3918e0b37f8c8be608f8a22
SHA512

da7b626c8616ce8baef313aa432a74d9e0e12791b7ad1ac97d182ac879f11360a9621b04e7fb2d04ece0bf3dbea562e0206c43e32219e08878e9a16d3cf6f15c
SSDEEP

12288:0zLrvy/zt111ByAhRJdMmcSKgxMHM7h0Njl1D:0zi/tyAhXcSKsCMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c36290a7f0a48a5d21af63300bf2ae

Files

64c36290a7f0a48a5d21af63300bf2ae
.exe windows:4 windows x86 arch:x86

831070c9fa2ac92921aaa5f0ec4a26f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaSetQuotasForAccount

ntdll

RtlEnumerateGenericTableLikeADirectory

user32

GetDesktopWindow
CreateIconFromResource
GetShellWindow

kernel32

GetProcessHeap

Sections

.text
Size: 454KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE