b67119f9cad6164f462b958c091d92d3d5fae9f225e85321a379812cadde1968 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b67119f9cad6164f462b958c091d92d3d5fae9f225e85321a379812cadde1968
Size

348KB
MD5

21c6992257b9fe6b4f9f4b8c346c020c
SHA1

778ac852b9d3abd656e10d6b244b04630efdf054
SHA256

b67119f9cad6164f462b958c091d92d3d5fae9f225e85321a379812cadde1968
SHA512

e173b1a234424c0c4dc6adc85e080b93c048f6863eeb8d1799aa1078db8d290c6e9b1042c6d226df44577cc05361ea877e49f079abc443e55e511910a969f27e
SSDEEP

6144:ZFUaZ09sUMfHgs8fvQV2Ynmr2/bWFqvO8T2Ys8d6SOeFSO+lzVBf:XUaZAWHuY2++2/bJViY/6zTzVV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b67119f9cad6164f462b958c091d92d3d5fae9f225e85321a379812cadde1968

Files

b67119f9cad6164f462b958c091d92d3d5fae9f225e85321a379812cadde1968
.exe windows:4 windows x86 arch:x86

b2fd6a90e65afdc0bc22247cb2970138

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FindMediaType
CreateAsyncBindCtx
HlinkGoForward
CreateFormatEnumerator
RegisterMediaTypeClass
URLOpenPullStreamW
ReleaseBindInfo

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 487KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE