df6b68b8a60149c2a765b2aa6d644fb5 | Triage

Sharing

General

Target

df6b68b8a60149c2a765b2aa6d644fb5
Size

179KB
MD5

df6b68b8a60149c2a765b2aa6d644fb5
SHA1

08b5891b314eb1545cda6948fce66a83253ca28a
SHA256

b0cce3a4b1f14c41b2563c8b8eb6155564591d0e225a1bff24dc8211a634408d
SHA512

def631682e14ba73ec4eaea24d401bf7e692de2ee162b92b5ac217b49c698767ce563e6eb6acba977773418accd78a207eb4348330e7f25cd81f276b6bc747ad
SSDEEP

3072:uaHzBgyvHbXQksAkItqQfSVIAhAAJ6dGz:uqBg+baQf/AwQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df6b68b8a60149c2a765b2aa6d644fb5

Files

df6b68b8a60149c2a765b2aa6d644fb5
.exe windows:4 windows x86 arch:x86

744db3ce8dcb8240f752e575916d499f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLocalTime
GetWindowsDirectoryA
GetModuleHandleA
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
RtlUnwind
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler

Sections

.scpack
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ