64daaf8423f3e3c9827570c9f61d0e68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64daaf8423f3e3c9827570c9f61d0e68
Size

142KB
MD5

64daaf8423f3e3c9827570c9f61d0e68
SHA1

1100023ce3b9a4c7f4d3f58bb0bc3b4c65e0aa6f
SHA256

37c89457d50be223e72e4fb5de66b2dbf6796209a29163620097f52cf57a0b5c
SHA512

5dc3e2b7057cada6075d5fe0b76a8828f9d9d60a2ff942751120bccd1e798a4d07db2aa4e0a0b8258b2848a5f2e12266e13b9ab5aa37d25a79bfffa8ac798c86
SSDEEP

3072:ZZf7fbaJ6HV5QLf/XsBZdb4aQepp00XgYEu/xPSjN35H70XIAKt2:Df3aqV8fk9b4+00XgHudSj1p70X502

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64daaf8423f3e3c9827570c9f61d0e68

Files

64daaf8423f3e3c9827570c9f61d0e68
.exe windows:4 windows x86 arch:x86

d2bbddb8c010773f04c2d9dd29668462

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 133KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE