d64497a3548b1a08d4301b4c3a635340 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d64497a3548b1a08d4301b4c3a635340
Size

31KB
MD5

d64497a3548b1a08d4301b4c3a635340
SHA1

9dac76bda37268de0f9aa36ca704e0356333371d
SHA256

eee6014c54000898e185498c0ca0f9b8fd46542d41e8d9e9ae522242a4471784
SHA512

07b2e76f352e80d47764ddec444cbfa42d973074893f8ef84087e861c0c4249a228fd11d3235e4d3deaeae5851bdcc6d3717087a217218a99f4f86c95e6cc729
SSDEEP

768:gx2Ta8pCJBqq0buhnxw4l+HPJIjGU86bS:gx2EAqWuhnxw44JfUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d64497a3548b1a08d4301b4c3a635340

Files

d64497a3548b1a08d4301b4c3a635340
.exe windows:4 windows x86 arch:x86

72482690c226a4fc3fd08e4129e7ba86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileSectionW
Module32FirstW
FindVolumeMountPointClose
SetConsoleNumberOfCommandsW
GetCurrencyFormatW
OpenProfileUserMapping
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
RtlZeroMemory
EnumSystemLanguageGroupsA
Thread32First

user32

SetWindowsHookW
SetMenuItemInfoA
LoadStringA

Sections

.code
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack32
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ