b64ac4032106f1daa0d6cabaa5b8bd79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b64ac4032106f1daa0d6cabaa5b8bd79
Size

51KB
MD5

b64ac4032106f1daa0d6cabaa5b8bd79
SHA1

34f9a2154912c79e50bb1fdb5ef037e02afdd6e4
SHA256

2dce9bfad874b86409207d08a527413d65cae1067e4379fc823c4119b0f2d536
SHA512

928fa5861c9dba0ee6d5f25f0d18732bd01e623ff34a313a9709327032b20d7885c1496db9fe44c4b6005b921d397200409cbd8edd0fd4a7ffbb9e373c7db9e8
SSDEEP

1536:zX5gICE0fZjIXYhx/PoOQR3zUwpprW19dbz2B:zX5gDiSx3oOUwqAfdbz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b64ac4032106f1daa0d6cabaa5b8bd79

Files

b64ac4032106f1daa0d6cabaa5b8bd79
.exe windows:4 windows x86 arch:x86

d138b4428074a69c52cd454d3426b9ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree

Sections

.text
Size: 2KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shoooo
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE