61d022ca8f2924a0deb48d050b0b1c50N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61d022ca8f2924a0deb48d050b0b1c50N
Size

94KB
MD5

61d022ca8f2924a0deb48d050b0b1c50
SHA1

249b93f7aaadbbaccb079ef129afac5781f1bae1
SHA256

dd4265a8b20c619e74025a7de4e7e2bf8d2fa2c1461b343c8b1039ce60aabc23
SHA512

d8dc9f821546f08074e4eeccff4b4f762bf044fa5f1ddcb74ca32c87405f06c8ed4690c2e414dddeb2fe3b93c44ef1ab105dcc6199b2227167a28b6f84c0a570
SSDEEP

1536:KhSwVt0N0k74r8nBo+FbD05gjkX8edia+CDmnRCbn5a3yhRJAHXtNA6U/yY8wQz+:PwVSN0IHBoefc584BZnnIrHXtF6Cwg+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61d022ca8f2924a0deb48d050b0b1c50N

Files

61d022ca8f2924a0deb48d050b0b1c50N
.exe windows:4 windows x86 arch:x86

6d9720d6f9399cca1d54c1efcf068e2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

MessageBoxA

advapi32

GetUserNameW

ole32

CoInitialize

Sections

.MPRESS1
Size: 78KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE