60cb7a29eb599f795ca66a3d163e532db62cb0738a2ede24c2c99d7254cfe416 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60cb7a29eb599f795ca66a3d163e532db62cb0738a2ede24c2c99d7254cfe416
Size

24KB
MD5

c5228b453570c9e1fb198b9b4bbc01c2
SHA1

dd4bc9aed424daa054d3ccc91cc04e1f6148d9e1
SHA256

60cb7a29eb599f795ca66a3d163e532db62cb0738a2ede24c2c99d7254cfe416
SHA512

1074e2aea187a78d456e8cff0fe122a89d64694c7f3930617e515a24141a1c3cbe65202a8df5a96fb8fc26ba7d0ad8c039fe98874833d1c6ef8bdac074f89ba6
SSDEEP

384:ErzPNSFyuIsPgKBTmL3cf4OAkBEZCXeLp9HjwB1DI3ReAnOJB5dQkwv0:ErzUyuIwdSLcQpICvXwB12nOJpQLv0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60cb7a29eb599f795ca66a3d163e532db62cb0738a2ede24c2c99d7254cfe416

Files

60cb7a29eb599f795ca66a3d163e532db62cb0738a2ede24c2c99d7254cfe416
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE