64c6dc4a8da2f002070bc11805389a4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64c6dc4a8da2f002070bc11805389a4b
Size

563KB
MD5

64c6dc4a8da2f002070bc11805389a4b
SHA1

6fbc0419ea0d52b4b0ee51900412bfb6f9c2154d
SHA256

e8a24deadf4e19f99bd0d18e7c1234da4ce4490bda162c450764a8944faba9f9
SHA512

990068d49b5a7953fd4f9612450b39a731cb94165bccf9010118b7da2447af03fb93ca102f23526f985891399074ea4fd645398a0a365329f41b531e9a052a7c
SSDEEP

12288:tp1M91Tf5/nHnwjrCj2eZynaPCffel6B2VlZ20KY0zJ6:tY9Jf5/wj0ZU8hS2VlRlgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c6dc4a8da2f002070bc11805389a4b

Files

64c6dc4a8da2f002070bc11805389a4b
.exe windows:4 windows x86 arch:x86

0f68c6cc0b146dd9b3164bf988ef61b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

winmm

timeGetTime

Sections

CODE
Size: 550KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE