64d39e9e5c34b449c119bd02e1d9a17a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64d39e9e5c34b449c119bd02e1d9a17a
Size

67KB
MD5

64d39e9e5c34b449c119bd02e1d9a17a
SHA1

b94993de0d65df4a85459e8c4cbdb1f4e6da53e9
SHA256

a56306eeead57c8cadd1ed13fcb86a3e24c72f627a73ca2a5284146fbaf24461
SHA512

379b9647d202775bebdd5b00970c0c2d0bcc89bc6f84a2b3394889f3dfe79aa4fbf06785371cfd8227091785f21bb6bce36c59c86f19ed2880209e7a78cccf4f
SSDEEP

1536:wpALAQIkgmRTS4jDtfs0dP2JcQPsQJL7BaA33TKxl:qwAw3btxp2FDJAnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64d39e9e5c34b449c119bd02e1d9a17a

Files

64d39e9e5c34b449c119bd02e1d9a17a
.exe windows:4 windows x86 arch:x86

4c0c4f68eff15cf5001f6952dc85cb0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree

ws2_32

socket

Sections

.cd4k
Size: - Virtual size: 440KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cd4k
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE