b64480f8638cf768f54dd10dc4e3948f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b64480f8638cf768f54dd10dc4e3948f
Size

111KB
MD5

b64480f8638cf768f54dd10dc4e3948f
SHA1

07e6aacc44f2a677d138597acb64a1d7d1eb3154
SHA256

eb574d108fa63aae5d6201a8935b43d3de94c07b1aa08ded5433b693335f1de6
SHA512

5beddf4e373ea066feb4eaff9c6b946d421acc6958c4c19ff0c2030b1a95134cbde0a897bc1d0c5df828e8222231e79be5f633b958c493c7fbd2c6fe768075bb
SSDEEP

3072:9JPZDNo8VByNAaXuxG7swssywcUQlHnNenc:1DrByNAa/7swAUOHNenc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b64480f8638cf768f54dd10dc4e3948f

Files

b64480f8638cf768f54dd10dc4e3948f
.exe windows:4 windows x86 arch:x86

bc7a7711ed9f22c92a8493c7df6093bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetProcessShutdownParameters
GlobalAddAtomA
GetProcessWorkingSetSize
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ