65768515ba8007948cc21dd66570319f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65768515ba8007948cc21dd66570319f
Size

14KB
MD5

65768515ba8007948cc21dd66570319f
SHA1

744924a8badbe300533be0e9f30b58a1334ed7c4
SHA256

7dfadf3796f1619da7cc5bd70fe8112d57f6b7b8045de7c107a3255054ec239e
SHA512

0c7bc6ed5d6afe5b3c584c314ab75a34b7c1e16f076ca9791212792a456a62e553d9237188552c7ddddacf27b2320abb9e39a16da4e96fe47db7617ebeb25854
SSDEEP

192:67Jn8rKKWD+tDAFvMYhDY8/p5zeZj2R3UejK80S5nW3kFBGqEFEYF94Ojlds74hi:67Jn8r3JCvMAp5ztR/hbnHNbXOik7UP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65768515ba8007948cc21dd66570319f

Files

65768515ba8007948cc21dd66570319f
.exe windows:4 windows x86 arch:x86

50003ea98908603463dc808dd7148e0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrA

kernel32

CreateDirectoryA
GetCommandLineA
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetProcAddress
LoadLibraryA
WideCharToMultiByte
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetFileAttributesA
TerminateProcess
Sleep
GetCurrentProcessId
GetLastError
Process32Next
GetStartupInfoA
GetModuleHandleA
HeapFree
GetProcessHeap
HeapAlloc

shell32

ShellExecuteExA

user32

wvsprintfA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE