d64f0520a7a5e7f65c8e81db998551c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d64f0520a7a5e7f65c8e81db998551c8
Size

241KB
MD5

d64f0520a7a5e7f65c8e81db998551c8
SHA1

9994d1d47a0ca44142b26b3a1fc83c5ef5a5322e
SHA256

60b451ef723b11968506df4fbb2e557366957c6df15060ae4395fba8280d37a0
SHA512

026b4fe1619fbd69e0e24dfeb21b425f39842abab99babb6c548db161af6639f6e3d58dd20ebbc1fbebeed6608b3b698cd25613d9a8519762865a0bba0e34e87
SSDEEP

6144:Wm5SpThnvjFt6bpMM70wjUbjD05awiDG:Wmkhht6bpMM7ITwawiDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d64f0520a7a5e7f65c8e81db998551c8

Files

d64f0520a7a5e7f65c8e81db998551c8
.exe windows:4 windows x86 arch:x86

28873afcf54d0184b283ebae13f3fbb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
FileTimeToLocalFileTime
GetFileAttributesW
GetConsoleCursorMode
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime

oleaut32

DispGetIDsOfNames
CreateErrorInfo
SafeArrayAccessData
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

shell32

ShellExecuteExA
SHAppBarMessage
Shell_NotifyIconA
FindExecutableA
ShellExecuteA
SHGetFolderPathA
CommandLineToArgvW

msvfw32

ICInfo
ICOpen
ICSendMessage
ICClose
ICGetInfo

Sections

.text
Size: 153KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE