67f543b4dcc162ea1de9a59956bda978 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67f543b4dcc162ea1de9a59956bda978
Size

198KB
MD5

67f543b4dcc162ea1de9a59956bda978
SHA1

d25781f5f6b8fb32fa5e0fa880931a5b67e2ee15
SHA256

39aa5a09d26e3704d1f1ee8ff88617a052646e07d8d293ff5527232c8ba14729
SHA512

371f6f563b44c703cf8e61540cb78b729ef6051127f0c8dfdbf61352baf8efa9c92670af62f4d038b53c8f301094157904160f0c9568852d07ebd7805dd39790
SSDEEP

3072:6E5+Ma6wAO3hgOt5zQU4nzXZJDK64QueA84XGBB256pR6nBVmcwqdaS6WALElmSG:h86ahg0b4zD3AjXGoC+8saS0glm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67f543b4dcc162ea1de9a59956bda978

Files

67f543b4dcc162ea1de9a59956bda978
.exe windows:4 windows x86 arch:x86

23f4390a1542c6df0c5c85dadb161b66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoW
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
IsValidCodePage
LoadLibraryA
QueryPerformanceCounter
RaiseException
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
lstrcpyA

msvcrt

strstr
wcschr
wcscpy
wscanf
atof
atol
fopen
fwrite
strcat
fseek
strncat

user32

RemoveMenu
MsgWaitForMultipleObjects
InvalidateRect
EnumWindows
DrawIconEx
CheckMenuItem
wsprintfA
IsZoomed

comctl32

ShowHideMenuCtl
InitCommonControls
GetEffectiveClientRect
CreateToolbarEx
CreateStatusWindowA
CreateMappedBitmap

Sections

.text
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ