65b4a506af25c42e4c76bfdb90b0f05aea027d7f286e54d2e4f39665480f7220 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65b4a506af25c42e4c76bfdb90b0f05aea027d7f286e54d2e4f39665480f7220
Size

32KB
MD5

c3d92fed1a93fef9e4810acee28ed0e2
SHA1

7b27fca64c1a9a89644d42a3545618d8fb69c10d
SHA256

65b4a506af25c42e4c76bfdb90b0f05aea027d7f286e54d2e4f39665480f7220
SHA512

5ba9c02f5c07abb7a40f3fbd12f6dda7787fd4fed250001b21307091352f7415f441bc0d94371603f6f89aa6b61355f8485d6dc0809eb422765b068820870406
SSDEEP

768:9mu2HxH26okb93hAtGjGoD4zGdUn+jyD1:Iu2vDb93hA4psqUn+jyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65b4a506af25c42e4c76bfdb90b0f05aea027d7f286e54d2e4f39665480f7220

Files

65b4a506af25c42e4c76bfdb90b0f05aea027d7f286e54d2e4f39665480f7220
.exe windows:5 windows x86 arch:x86

172a6440b3152d86a4392d15946c54ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

winver.pdb

Imports

kernel32

GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadStringW

shell32

ShellAboutW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE