67c947a6b02ac93b2b8fd139e0f7020a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67c947a6b02ac93b2b8fd139e0f7020a
Size

16KB
MD5

67c947a6b02ac93b2b8fd139e0f7020a
SHA1

f4c0d5e54e8d71af8aeb5b895da2088dd866a7ae
SHA256

f9e964a03b7bb3298bf304a2917cfabbd3be4216f77929b1eec7941c189bc884
SHA512

40c7717d19454fe7d45ff1a5f10277b1d502fa471113692abc50b3b37495067a70bb6fad7cf3bd1fa3c22b8741dce14552a4bcfcc0e59371aa0feddfd9b175c1
SSDEEP

384:177J5/GvbIabPn99rbF89hkB+Z9m21B+TVEZrc:1795/Gz9Pn9pB+jmYB1Zo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67c947a6b02ac93b2b8fd139e0f7020a

Files

67c947a6b02ac93b2b8fd139e0f7020a
.exe windows:4 windows x86 arch:x86

6d84fd323d920e436381375d445bbeda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ