65c9b90d8d1b82d94587c5eb75d8c968 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65c9b90d8d1b82d94587c5eb75d8c968
Size

268KB
MD5

65c9b90d8d1b82d94587c5eb75d8c968
SHA1

e4a3f82e68077b59011daa8b6181828236a41c7e
SHA256

db4357bc2a53f9abe79a0de3fbf446ccb1f136df0e91801aa9de6f0f067926f8
SHA512

c3bac610d925c250e7f1e39a32996d8266f38a5ea51dd3ce246e31cd67323ee437fe0abb1d5f2666e3a08b708b938ee5c81a077cb555b752957a101e006df46e
SSDEEP

6144:D2VJfiPO+1eIZ7ogkqlpHMU+9jpZL7CdNGEj:D2JfBId7kqlpsUER79Ej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65c9b90d8d1b82d94587c5eb75d8c968

Files

65c9b90d8d1b82d94587c5eb75d8c968
.exe windows:1 windows

ff17e94c9d9774363ae48232954c7538

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind
EnterCriticalSection
SetLastError
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
GetStartupInfoA
GetLastError
GetCommandLineA
lstrlenA
GetVersionExA
GetModuleFileNameA
LCMapStringA
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExA
RegQueryValueExA
AddAccessAllowedAce
RegSetValueExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 344B - Virtual size: 344B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ