68201a3a6f4ecda2c98fe5c5ebe41056 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68201a3a6f4ecda2c98fe5c5ebe41056
Size

237KB
MD5

68201a3a6f4ecda2c98fe5c5ebe41056
SHA1

58012efcd81350eaff70f627d7c6816b9211dfea
SHA256

dd5287ec358ba1bb28dc1a26abcbb9507bcadf8d02b13b04ad96dee543e38dfe
SHA512

4e9e9f5ed39357cee633fcbab5f483263c526196681615c39058ef75792914606511c151929de84909ae962e2f4a732faa8f8841cfd9a152598299ac9ea62b47
SSDEEP

6144:iChcfhRNXaVwVyePoXQQRPEfDvoIasZ02uKAXXCyXjeJRl8Xjw8RI:iCkE/ePoXjRP6yEVajK58XjD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68201a3a6f4ecda2c98fe5c5ebe41056

Files

68201a3a6f4ecda2c98fe5c5ebe41056
.exe windows:4 windows x86 arch:x86

4b55d3c18dfbad66ab7fb957e86ed29e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryA
GetProcAddress
VirtualFree
Module32First
GetEnvironmentVariableW
VirtualAlloc
Sleep
Heap32ListFirst

user32

SendMessageA
PostMessageA
GetInputState

wininet

InternetCloseHandle

ole32

OleInitialize
CoInitialize
CoInitializeEx

advapi32

RegQueryValueA
RegEnumValueA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE