c620eed5f74f3836b9ae70f3db3a16be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c620eed5f74f3836b9ae70f3db3a16be
Size

26KB
MD5

c620eed5f74f3836b9ae70f3db3a16be
SHA1

74a4ad7cf360a3f2acacf03a57c1ef7190ab6ada
SHA256

aef12622f68a9ccd9de79b1d0e2846d8a5fea35bf19466ba99a6a8e9d4ede99a
SHA512

1dcce17f79cdd309fef2cc9e88382d9f324c12ba9acda4ea7c521aa2214106dfff8d9118c2bda0c38d79513784a5b29f0d698d61b2d63155fb64cbf894120f91
SSDEEP

384:CKkBDoSnRZU4cqHAdp1zzTojIKFQWfibzWDuqIlN8VFdQ6HjRfMvQ9c2vO1b:qLRcmAPNToEKQWKo+NWfQGnLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c620eed5f74f3836b9ae70f3db3a16be

Files

c620eed5f74f3836b9ae70f3db3a16be
.exe windows:4 windows x86 arch:x86

c6f7a45f5551e333b07aae008f6c8c66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemCodePagesA
GetNamedPipeHandleStateW
ReadConsoleInputA
lstrcpyA

user32

IMPSetIMEA
SetDlgItemTextA
CreateMDIWindowA

gdi32

GetKerningPairsW
GetGlyphOutlineA
CreateColorSpaceW

Sections

.data
Size: 20KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 512B - Virtual size: 409B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ