68677fb6555658d835dc583add9338967448cbd9ae9401bbd581843d75e7c501 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68677fb6555658d835dc583add9338967448cbd9ae9401bbd581843d75e7c501
Size

120KB
MD5

acd3c64364b5027a3a3dfd1c6b68e73f
SHA1

530b9394e3677b9063e2eab492bbb9b74f13c6ce
SHA256

68677fb6555658d835dc583add9338967448cbd9ae9401bbd581843d75e7c501
SHA512

4090d30383ea1425c30b7bbf9cdcc60794a68fd568e687653288e8bfaf08bdbb6997c78596692f4659bcbc753cd1ada39b85079dc938caec7ba61747c3f55d7e
SSDEEP

3072:DwZUOkcag2OFMTxxXvJzEOCcoDVwpoRY+LUXTFbg/ucyB:DwZa5OFMTxxXxzEOCnREZLT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68677fb6555658d835dc583add9338967448cbd9ae9401bbd581843d75e7c501

Files

68677fb6555658d835dc583add9338967448cbd9ae9401bbd581843d75e7c501
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ