64d93720e8df5ace4b8b2b7071219a60 | Triage

Sharing

General

Target

64d93720e8df5ace4b8b2b7071219a60
Size

26KB
MD5

64d93720e8df5ace4b8b2b7071219a60
SHA1

4e819f44dc9dc3a0b9d251e893a3a05aa7869301
SHA256

1453e149ff91aab74a9da067cfb8a7f745833a77cc886712569addaad9e86c90
SHA512

5b17e737cbd5b28265a47b0562659567169446bc69d7e47a791c1f005b071c2e4968184cc4e062a2eda276e5a367df786141b760f106a5bd97db3fcc785737e0
SSDEEP

384:33a2PoNoo7VVLp+mQYZLhqV8WWexmZ7a766jtJdAna6hf0xr30RLo/tMa:33oNo+eIq2WWeUZ7adH6hf0xr3MLYM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64d93720e8df5ace4b8b2b7071219a60

Files

64d93720e8df5ace4b8b2b7071219a60
.exe windows:4 windows x86 arch:x86

029a2ed68fd773b10a828c7d160e6f29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
ExitProcess

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIW
StrStrIW

Sections

.flat
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE