60dfa675f13cb37be65da1cad84feba306b304a14d01d0d9f81e8417698ce11b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60dfa675f13cb37be65da1cad84feba306b304a14d01d0d9f81e8417698ce11b
Size

71KB
MD5

0c4d41883fbc847570d6612724c24354
SHA1

58657f566340dee90f3fc2a015986c2923e836ca
SHA256

60dfa675f13cb37be65da1cad84feba306b304a14d01d0d9f81e8417698ce11b
SHA512

f04f6bc9efd530988ab9ffc58141e3965703b59bc7366c455c7c917f57e81d58118ff160494bbc41f25a86234700b3f59685b6e7694f1bd0495122a675fab2ed
SSDEEP

1536:Oy5VwNvrJeHvrLHeSFC/gs9cu2nqvuDQZHJmWGImy+NTtJByLSAZHCoGLa7/:Vw1+jSA4NJ2qv+Q/e5Byj5pd7/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60dfa675f13cb37be65da1cad84feba306b304a14d01d0d9f81e8417698ce11b

Files

60dfa675f13cb37be65da1cad84feba306b304a14d01d0d9f81e8417698ce11b
.exe windows:4 windows x86 arch:x86

36b05a87d71a5fb4c61d836ce78447c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
BaseIsDosApplication
EnumSystemCodePagesW
SystemTimeToTzSpecificLocalTimeEx
DeleteAtom
ClosePrivateNamespace
CreatePipe
K32EnumProcessModules
SetConsoleOS2OemFormat
SetConsoleScreenBufferInfoEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE