67eca6628966367a8f685e46a31b47d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67eca6628966367a8f685e46a31b47d8
Size

264KB
MD5

67eca6628966367a8f685e46a31b47d8
SHA1

70de832e670d0495bc9c884e8778714c62dd41e5
SHA256

efeb92dcb07698416b520068349ff300bcdf27d1e2260a42a679f1a9be01d410
SHA512

d21b379dabecec1a43b44b9b4874f522dfbdf42f7e3d89552c721984cb77034fbf8d1cb1922134fa5cef39421b5c0f58f66b8ff916f9a3f5c7da0223722da67a
SSDEEP

6144:3qHLCsfnzrJffOrj6VmUzM93s4+PVdijMnD4tmES3:3qHLCsfzBfOrj6QUzjVdijoWm5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67eca6628966367a8f685e46a31b47d8

Files

67eca6628966367a8f685e46a31b47d8
.exe windows:4 windows x86 arch:x86

996a062403a738a7269c01717d3ac630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
LocalAlloc
CloseHandle
GetProcAddress
GetFileTime

msvcrt

_strcmpi
__p__fmode
wcscat
_acmdln
_isctype
_ltoa
_waccess
strtol
_vsnwprintf
tolower
strcmp
_wtoi

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ