67e19fa3207162dfa6df6cb2af47d0e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67e19fa3207162dfa6df6cb2af47d0e6
Size

4KB
MD5

67e19fa3207162dfa6df6cb2af47d0e6
SHA1

285175fb756482a0dd4169f1bfdf6dcc9482e6c2
SHA256

c0e0500fa22f26d7b1c8f4482ffd5e8bf422cfbe430c3ee3c9df02dae4a56275
SHA512

d27e06cf20d478a2d50d0e6f0dd7a8ef42c0a8e8fc9d0ca443705fb1efefc45b4fc180dd9316e71db868a864b8c026f2c0612bff56fde3be4651f9dbcd5320a3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67e19fa3207162dfa6df6cb2af47d0e6

Files

67e19fa3207162dfa6df6cb2af47d0e6
.exe windows:4 windows x86 arch:x86

bf9ee790ec51dca78459c03bda9ce71b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetSystemTime
Sleep
SystemTimeToFileTime
GetFileTime
lstrcatA
lstrcpyA
lstrlenA
ExitProcess
CreateFileA
WinExec
CloseHandle

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE