67e498ba9ac3e8a754bc93b5f7fa71e6 | Triage

Sharing

General

Target

67e498ba9ac3e8a754bc93b5f7fa71e6
Size

182KB
MD5

67e498ba9ac3e8a754bc93b5f7fa71e6
SHA1

bb59d7649bfc0c6921dec49749b72476ad230974
SHA256

d226ab96073ab8c672a3ac2b2c9d621d346af46518f8a8a2fe9c074e2c55f191
SHA512

f6a5370bb3d1e13fdc88324a9ee3a78a82e4c0c4b13343872966c15b40afa2c4eb9c6d81dfa4233c45ebdc03cde849e13a1e443290c9ab78b7a1be8be6f42e03
SSDEEP

3072:v5PDFjDVbUc9AC58ckTQX2ciHu3fKbAQ80+E5FcLDvKT/Q5x3W6pr+os+ZbFj/5:hPtDVbUnCyckHFu3SbB80+YcvvKT+W6X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67e498ba9ac3e8a754bc93b5f7fa71e6

Files

67e498ba9ac3e8a754bc93b5f7fa71e6
.exe windows:4 windows x86 arch:x86

9eaba5a6fc7796a58444f2d4b4b5e3fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
GlobalAddAtomA
_lopen
WinExec
GetBinaryTypeW
ExpungeConsoleCommandHistoryW
GetConsoleCP
GlobalFindAtomA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE