6164eaeaf523e4edbf738ff8784566749156c5faa51e6bcf069975e58efbacb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6164eaeaf523e4edbf738ff8784566749156c5faa51e6bcf069975e58efbacb4
Size

97KB
MD5

720cb4afab136b8e9799da36bcbe7a77
SHA1

037f2ed0cc4e4c0b53f247b647610c7297435ef1
SHA256

6164eaeaf523e4edbf738ff8784566749156c5faa51e6bcf069975e58efbacb4
SHA512

e122fd28ec6f5649fd3ce983ddf79b290f9a74a0860b6ba65b8147c1cb4e8342005b6774b674cb6a1d4925ae535f31b3bf81fc6a7ed17a215189d31336af2ede
SSDEEP

1536:mOyB1D+5nK6FVGFHN5yzB4ZefwlQsOmr2UM:mPv+5nbF8NwVouwMnB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6164eaeaf523e4edbf738ff8784566749156c5faa51e6bcf069975e58efbacb4

Files

6164eaeaf523e4edbf738ff8784566749156c5faa51e6bcf069975e58efbacb4
.exe windows:5 windows x86 arch:x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 36KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bijdhfdg
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE