64c92c77a6d733dbdb2f889631a0ce67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64c92c77a6d733dbdb2f889631a0ce67
Size

68KB
MD5

64c92c77a6d733dbdb2f889631a0ce67
SHA1

4252a7e3dcbcb4f00e0995040c112f214821b5e9
SHA256

1b8d04b9617199b9acb48912de4c05f3cccac89308a6bca162dce83aa0688f0c
SHA512

7aeb1fe2b30e2972ccac4ed7a54cf9a81692e21b0c4eacaf3414568078ea2cfa21fc1922d3b24414f1ba42295cfbbe2e4c398b09bb99b1759e17ee5357fd63cd
SSDEEP

1536:nE6rh3qps/BhPvL+rKg/wIG+b6wtTxE4hvDhUeeN95hV:BrN5DyrKMwP+uAxN9WX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c92c77a6d733dbdb2f889631a0ce67

Files

64c92c77a6d733dbdb2f889631a0ce67
.exe windows:4 windows x86 arch:x86

00aa0da247c88cfa89ca1d4dd98d17a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetTapePosition
MoveFileExW
CancelTimerQueueTimer
ClearCommError
EnumDateFormatsExA
SetupComm
GetDiskFreeSpaceExW
AssignProcessToJobObject
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

GetDukmvdtcwjd
BeginIxbylikeh

Sections

.text
Size: 5KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE