00e64f3a4f1f463a1c9037c1aaf6992ec7e190efcaa38a2dfd950c2d6f7048e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00e64f3a4f1f463a1c9037c1aaf6992ec7e190efcaa38a2dfd950c2d6f7048e3
Size

69KB
MD5

7bfe5135cf31c55a572aed944f836e03
SHA1

f2055b186099616236a50f22bfccacbb80529f63
SHA256

00e64f3a4f1f463a1c9037c1aaf6992ec7e190efcaa38a2dfd950c2d6f7048e3
SHA512

5d6d31bc9a5a8ab5b72b0b0ce4e680b916ba0d14d2e5d3ecb892f1268a43dc71a30abb993fe40d0aec6f00c13910838ba133b15575ecd42961e5124fc4b7c941
SSDEEP

1536:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsryrEgNYkrf:mq/5jMIPtdgI2MyzNORQtOflIwoHNV2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e64f3a4f1f463a1c9037c1aaf6992ec7e190efcaa38a2dfd950c2d6f7048e3

Files

00e64f3a4f1f463a1c9037c1aaf6992ec7e190efcaa38a2dfd950c2d6f7048e3
.exe windows:5 windows x86 arch:x86

a3e8b5e80d5f9f266119a4ac18211954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
TranslateMessage
LoadCursorA
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FillRect
GetWindowRect
KillTimer
SetWindowPos
BeginPaint
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ