65cd7a69e0a4d095ffda243bdc6c4a99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65cd7a69e0a4d095ffda243bdc6c4a99
Size

29KB
MD5

65cd7a69e0a4d095ffda243bdc6c4a99
SHA1

e5889dadaf1bff51495d25da82cc81939d4555c7
SHA256

0a8edb4029be0283349eac50e06cda4c4cb0aa135974ebb352f0433b878a98f0
SHA512

20623d2134bc382f322c930883602de9ff03063a2b7c98762b07c5736278aee73ccd347bd1f1c880b02c4ac8109ea56a927679b6c83d467b86016892d8e39f5d
SSDEEP

384:1AifqzHGi5IjRlbFkj1hdbERLJN2n3o7/zazVpRsj5FUr8n2bQ825FUXKEwUO6qR:1AifqpybIb23t72zTRHbr25EAn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65cd7a69e0a4d095ffda243bdc6c4a99

Files

65cd7a69e0a4d095ffda243bdc6c4a99
.exe windows:4 windows x86 arch:x86

a1ec8dce401eba16d45a4f1aa06ebd77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualProtect
ExitThread
CreateFileA
WriteFile
CloseHandle

msvcrt

memset
_CIacos
memcmp
_mbsnicmp
_mbsncmp

Sections

.flat
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE