f67250566c577ca3d36871ce820749d68135da5ca49e558b5a54cfa871b86c57 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f67250566c577ca3d36871ce820749d68135da5ca49e558b5a54cfa871b86c57
Size

939KB
MD5

f607ba1952fb00e541e1905e16f421c8
SHA1

c445317f39ad4fc716c2b54125f66643bc785e7a
SHA256

f67250566c577ca3d36871ce820749d68135da5ca49e558b5a54cfa871b86c57
SHA512

5d5bf1ab1bb437dceb15b51370099df5a9839bad67201b418e7c93a10ba3ff11f45616cfe9c6acd33e79d894c5d0d3672044d77568a868585723ab60d830e158
SSDEEP

24576:zfEd9yqEy215M3a9Blkf+ZEQmj6tnX/K8qpnrqzPhrvpFqEw:zfGRF2LMK9IitmjonXyJrqz5rvpi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f67250566c577ca3d36871ce820749d68135da5ca49e558b5a54cfa871b86c57

Files

f67250566c577ca3d36871ce820749d68135da5ca49e558b5a54cfa871b86c57
.exe windows:4 windows x86 arch:x86

9820bde5c715c9db31b28f8a967a5d8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle

msvcrt

__getmainargs

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 160KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 773KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ