d4ee67e83985faf30ad9d34b97048efa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4ee67e83985faf30ad9d34b97048efa
Size

188KB
MD5

d4ee67e83985faf30ad9d34b97048efa
SHA1

60af078d8b290fc3a49db0476ed80e9675d2d200
SHA256

cb7bcf72c58f5bf64573d968194294669f0f95df117794393fe44311ba927d25
SHA512

0d6010d50b6006dd5a976bfb75daadc1142d07e52ee2015c889fa9ddf7e1ba45a44b770ff66bb93eec8794681e7cc30f9dcad46c2388f3bc23c30541e05747f7
SSDEEP

3072:Sk4FCxJHa9Nd5rUjUyU4iZZcAxRhG8jcQQ1Kqu+FebmG2p4VvJ:S7FCx25wjUte1QQ1Q+0bt8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4ee67e83985faf30ad9d34b97048efa

Files

d4ee67e83985faf30ad9d34b97048efa
.exe windows:4 windows x86 arch:x86

b6b071c57a7dc3ff81561a979c850bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineA
GetLastError
GetModuleHandleA
ExitProcess
LoadLibraryA
GetCommandLineW
ExitThread
GetProcAddress
GetOEMCP
IsBadHugeReadPtr
lstrlenW
GetACP
IsBadReadPtr
GetModuleHandleW

Sections

CODE
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ