67f93de360b8ab5922a25d058f66c068af817cacef3bc0e81d1f8c418f73799c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67f93de360b8ab5922a25d058f66c068af817cacef3bc0e81d1f8c418f73799c
Size

3KB
MD5

36f50d83de5c7958f708a2c4f1e56131
SHA1

96d01ad24a53b17b1e0ff79c38dc8988e227d1de
SHA256

67f93de360b8ab5922a25d058f66c068af817cacef3bc0e81d1f8c418f73799c
SHA512

42fc70f647bbce9502726047e083ed1489e4f020251f82f617fd3677439b7b6317894cedd74ef37afca2f454d778476b75b61eaeb8e6fe9726f4da9255fe6f41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67f93de360b8ab5922a25d058f66c068af817cacef3bc0e81d1f8c418f73799c

Files

67f93de360b8ab5922a25d058f66c068af817cacef3bc0e81d1f8c418f73799c
.exe windows:4 windows x86 arch:x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ