c68e37a8690f24c91a44a3fa3a702ea6 | Triage

Sharing

General

Target

c68e37a8690f24c91a44a3fa3a702ea6
Size

274KB
MD5

c68e37a8690f24c91a44a3fa3a702ea6
SHA1

db3fd6e9296d40b2e7d982e0f0c7a5deffbbe8de
SHA256

5e1806b5f29a2055834a266c42bc1c89dc0e767afb90dcf27af8c195cd8ed90f
SHA512

e4a029920c6fe950eaf6f0e8c5590e0553be40ab1bb144b0d4958cab3b03886b4422d1e9b9104c8ea2a1a4dcbf63b01be29b1b700305c5415658a51926774d56
SSDEEP

6144:bjIe17ZLYpfiln0eOwoqp78BlSnsDdDQq651yAtjNvqxmtShYj:bk47Mfil0dzqpQZd96BtjNvtS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c68e37a8690f24c91a44a3fa3a702ea6

Files

c68e37a8690f24c91a44a3fa3a702ea6
.exe windows:4 windows x86 arch:x86

c6e6a82c46a7170452fdf9c53d2dc5a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
GlobalGetAtomNameW
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
lstrlenA
FindFirstFileA
ReadFile
EnumResourceTypesA
WriteFile
EnumResourceLanguagesW
GetSystemDirectoryW
WideCharToMultiByte
GlobalHandle
IsDBCSLeadByte
SetFilePointer
FindClose

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ