c63b93ca84eaa3eee34fa32086cce958 | Triage

Sharing

General

Target

c63b93ca84eaa3eee34fa32086cce958
Size

69KB
MD5

c63b93ca84eaa3eee34fa32086cce958
SHA1

2b02b10ceaf2d113ef2e8f980f70271717a2ac26
SHA256

ac3170ab0060c351386d0442bff3ece6782e4bf7c5a9ada883faa58b4b30c243
SHA512

d025d3ec83c716902aa98e023cec1a5c517faa92c0fde0b82bfac7d0b5a70e10e08756eab017e3d91f0c47df6d2160e889b8ddb4a77a017cc127fb29850cf37c
SSDEEP

1536:7/os2y3sU7QOnMFmG4RyPrqH/CQbaJxpMmwNNYOLdbM9r:7/ohZYzrG1P+zbuD8KOLdYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c63b93ca84eaa3eee34fa32086cce958

Files

c63b93ca84eaa3eee34fa32086cce958
.exe windows:4 windows x86 arch:x86

6b3d2a05aaa024c0880099a6d8ea6441

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcessId
InterlockedExchange
OpenProcess
GetLastError
GetModuleFileNameW
GetProcessId
CreateThread
Sleep
WaitForMultipleObjects

msvcrt

_initterm
_controlfp
_j0
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit

user32

DrawTextW
GetIconInfo
GetSysColor
GetDC
ReleaseDC

newdev

UpdateDriverForPlugAndPlayDevicesW

shlwapi

PathAppendW
UrlCombineW
PathCombineW
UrlGetPartW
UrlApplySchemeW
UrlCanonicalizeW

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ