68c04c9f5ffafb717bafe535a677be4f73fa60a0dd2c63b3b30ff16c112d0d9bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68c04c9f5ffafb717bafe535a677be4f73fa60a0dd2c63b3b30ff16c112d0d9bN
Size

26KB
MD5

d60e1027d678219e43c8f610204281c0
SHA1

f75895ae3d7444483bff7a6c47b2ee9b578abe97
SHA256

68c04c9f5ffafb717bafe535a677be4f73fa60a0dd2c63b3b30ff16c112d0d9b
SHA512

a842f073b216131fe9d09bdeeb13a3dab6fd2a5133792bcdec2ae05625dd2982daca6fe52a887b49fccfa4edd195e90471a7dfb948af257252a753798eb03e47
SSDEEP

384:0l6d+tqqDRhG15xvnxWOFwIqMV468UneYQ:0s+oohCx8aqMVcYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68c04c9f5ffafb717bafe535a677be4f73fa60a0dd2c63b3b30ff16c112d0d9bN

Files

68c04c9f5ffafb717bafe535a677be4f73fa60a0dd2c63b3b30ff16c112d0d9bN
.exe windows:4 windows x86 arch:x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ