67395615bcb0d9a00e17a50b0b529db5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67395615bcb0d9a00e17a50b0b529db5
Size

41KB
MD5

67395615bcb0d9a00e17a50b0b529db5
SHA1

4bcd12f49094a01fd2d63fac48a8101d690bab3e
SHA256

21cfdd1402e2cd697b1fb611804a7bf9842cb95ac003ceef8d787355c434e538
SHA512

7f839fbd0f6b46b86fe6df908e7ef5143d15429d320d013223c1f3109ffa682e44106b008ac8cc28ae3bea0e8d090c65f60eda221bb592527cd265025ec55abf
SSDEEP

768:NUVia04009w8DcBNaja0CE0dur6v0YHAVDqkv09AyrkV4V9RXzu5Z0xsEnHH47Aq:6q8ch87yr1etEHHUAy8PvJVc+Y7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67395615bcb0d9a00e17a50b0b529db5

Files

67395615bcb0d9a00e17a50b0b529db5
.exe windows:4 windows x86 arch:x86

e7b69477037935207409526984559157

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosPathToSessionPathA
CreateMutexW
OpenThread
DisconnectNamedPipe
InterlockedExchange
LZDone
DuplicateHandle
InvalidateConsoleDIBits
GetNumaNodeProcessorMask
TlsAlloc
CreateDirectoryExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE