b68d6c50396a06d2ab4288ae5d0c09b2 | Triage

Sharing

General

Target

b68d6c50396a06d2ab4288ae5d0c09b2
Size

119KB
MD5

b68d6c50396a06d2ab4288ae5d0c09b2
SHA1

4898bfa026f9be333c43d20071515efefc649444
SHA256

556aa706dcb1bac2e200ef1e72846053ea40a28b7461888f6758a1026d0fddd5
SHA512

b6976c8cfc79d5051489a96a815f76e55ccbabf2d10202c1755b921d4025a9c55dfea28efeb52907f4b5fdda3f6c2ae1ce35cc20762ecbdd5a70e64a442976e9
SSDEEP

3072:Subw23QLJzNR/ZmJIxG03YWSAtC1AEHF3XCt:SzRRmJgoAtclY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b68d6c50396a06d2ab4288ae5d0c09b2

Files

b68d6c50396a06d2ab4288ae5d0c09b2
.exe windows:4 windows x86 arch:x86

249b0d5016492a44b0bf2b5af11393db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB

kernel32

GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread

Sections

.text
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE