64ea33dd4f6962db13295de73d113448 | Triage

Sharing

General

Target

64ea33dd4f6962db13295de73d113448
Size

146KB
MD5

64ea33dd4f6962db13295de73d113448
SHA1

8540696648d3cf3a61e754136fa94be3853d72d1
SHA256

17b74799db438b07db058e4b96b13e98e05f3729ae2ccaaa796c9bdece23009f
SHA512

885753748a99386962777659f81fd839c08a32f2c251034e404cd8f719a85aba18ee80ce4f58224a424ed018eaa9319625a70cd51d97deb9f8935710ec2e331f
SSDEEP

3072:N/RJp9x9lqW1oEr0hsLZSHI4GybIXxlrxg4/hmWo95M9PjQS8u:NZ1x9lMEACYI4fE7r9hlgpS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64ea33dd4f6962db13295de73d113448

Files

64ea33dd4f6962db13295de73d113448
.exe windows:1 windows x86 arch:x86

ff17e94c9d9774363ae48232954c7538

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind
EnterCriticalSection
SetLastError
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
GetStartupInfoA
GetLastError
GetCommandLineA
lstrlenA
GetVersionExA
GetModuleFileNameA
LCMapStringA
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExA
RegQueryValueExA
AddAccessAllowedAce
RegSetValueExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 344B - Virtual size: 344B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ