c68cdcf8876672ebd480cbf4b4987120 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c68cdcf8876672ebd480cbf4b4987120
Size

77KB
MD5

c68cdcf8876672ebd480cbf4b4987120
SHA1

44b18083146d9b821f2e219fe6a5062aef1c18a7
SHA256

4dc40ae213620cd52dbbed616a0a550e03f3ef06550e205c32a8fc92f30b48af
SHA512

2680702e475f7ab9266abee480d8ee34e68b233486193a33c3b6a2b3b06e0db0359f4a4f3049fbfeb80a081cc6c7bbf4148a871d56112645c20893fc707a2bc0
SSDEEP

1536:4ItH0hhLPA6xZX/0pnVKCHq0+8t05NfGBj/uKNALwO9OI:1UhhLPLF/MVKC882k6KyL9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c68cdcf8876672ebd480cbf4b4987120

Files

c68cdcf8876672ebd480cbf4b4987120
.exe windows:4 windows x86 arch:x86

8c9f4b0d987bd85b889088831f6faacf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
GetVolumeNameForVolumeMountPointA
VirtualProtectEx
ExitProcess

user32

DestroyCaret
GetActiveWindow
GetWindowLongW

Exports

Exports

EndBhmubvdx
IsCpfbyomvn
Rlvgjkmdhj

Sections

.itext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lyaeew
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lnvlds
Size: 69KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ