63974886cb0672b44d5c4a3da26d634fb5e44e1b5bd295dc66f76fc9a746a694 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63974886cb0672b44d5c4a3da26d634fb5e44e1b5bd295dc66f76fc9a746a694
Size

57KB
MD5

5506021ab0d5010d63002d5f1a133557
SHA1

d9630fd7abbab5615285ed8e8c70d8457a479897
SHA256

63974886cb0672b44d5c4a3da26d634fb5e44e1b5bd295dc66f76fc9a746a694
SHA512

87ff120b5db111bc5ef69f822ef59cf366de6e70d229d1cae7115eb44078ce40072bc2cf29419e9e7da1a9212e55ab313ce13845c9c7d9c96ae97ddde28199d2
SSDEEP

768:ZWuj8d058zVKajwpysbGvkifOBqN75UlEpTHgH0xhqha7uNmpUh:Tj8d08HjiifOBqvUlEhHJFuEU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63974886cb0672b44d5c4a3da26d634fb5e44e1b5bd295dc66f76fc9a746a694

Files

63974886cb0672b44d5c4a3da26d634fb5e44e1b5bd295dc66f76fc9a746a694
.exe windows:4 windows x86 arch:x86

8d1f3607f6f644aa45436b6badedcfb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
VirtualAllocEx
VirtualFree
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE