68495892cac81f2b8a258e4604ffa4d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68495892cac81f2b8a258e4604ffa4d5
Size

109KB
MD5

68495892cac81f2b8a258e4604ffa4d5
SHA1

288acd5ed75d8100dbc30c46b4599cac7e864845
SHA256

950c9d26a66ab8a98981ac02a9085fe636c9955d415de51a57febba249492f4f
SHA512

1dd7ac355fc37c3768149f99d090809a6eedcdb80c5e9213147321370b2b8e3bcabe4f07db813fa7e8315c7d057107aff4c489222b350d817028d77e34815955
SSDEEP

1536:4yD5VhV6o6KTk7QXES6yx7wID1OQzQKqA83ORBOd0xIukW2RogfVLdVLSzDYoM9s:44V7LA8ES6o7wyvM3OCqiG2RffVcEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68495892cac81f2b8a258e4604ffa4d5

Files

68495892cac81f2b8a258e4604ffa4d5
.exe windows:4 windows x86 arch:x86

950fb7622799dbdb0d906928fbbf79ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNlsSectionName
SetConsoleOutputCP
GetConsoleAliasExesLengthW
IsBadHugeReadPtr
FindVolumeMountPointClose
FileTimeToSystemTime
GetUserDefaultLCID
ReleaseSemaphore
EnumSystemLanguageGroupsA
OpenWaitableTimerA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE