67e01938d416e60f6cf57f8d70f6c46d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67e01938d416e60f6cf57f8d70f6c46d
Size

38KB
MD5

67e01938d416e60f6cf57f8d70f6c46d
SHA1

0c70d14ce6e3bb385a5ac8774f8f9b265bc26082
SHA256

7878c04ba926c69404de39f7c15ec92208b62e940c0098cf9517d3c225a673f4
SHA512

a14d7b5235f5da2e50927ba6b876f77dd53722ba07a1517abd5baac530e86dd409153a073c7cf99a34f0680b3f44b9792285e0fac4194eeb45d5e6f4d3cf861d
SSDEEP

768:gvetPpj5XalRmjs3KQJsJd2WSP2CItlkocVXEr6zZR/gIMZSV:nD++s3ns7w2HGoc/g92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67e01938d416e60f6cf57f8d70f6c46d

Files

67e01938d416e60f6cf57f8d70f6c46d
.exe windows:4 windows x86 arch:x86

8bc2b06c4420b652f19d14fd3a807024

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

urlmon

URLDownloadToFileA

Sections

.text
Size: 32KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE