67840fda8ec5cb518062024d82422e64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67840fda8ec5cb518062024d82422e64
Size

1.3MB
MD5

67840fda8ec5cb518062024d82422e64
SHA1

8c0561f82ce8b64274c755799cbdc98f764391ec
SHA256

7cb290a14727c28781f7ed9b3ecb1450a9c6af6ac62fe48f9ef77fe3583506ad
SHA512

5c81c7131663ab8a97846b5e3767cdff4121bb7ef2a5757f80355eee17cb05c7449bc42381091eda49ad32f7b3c2165c1b2cb4781126c4138d923998b4df58f3
SSDEEP

24576:gM1Q9BNNb+YYOJtB6ZMiSvatrsz71A5LFbJsgRqcsV7CD15Rrgv5p:T1QbqAB6ZMibtrJnlzmm1Dmp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67840fda8ec5cb518062024d82422e64

Files

67840fda8ec5cb518062024d82422e64
.exe windows:4 windows x86 arch:x86

4d5ed2578eac6a24ac4c7700386f9be5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

ole32

CoTaskMemFree

shell32

ShellExecuteA

iphlpapi

GetIfTable

Sections

.text
Size: 1.3MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE