68cb4b0afbaf60b6c163f654e702f61d619b238ab1091c42e6b06387787a1ecbN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68cb4b0afbaf60b6c163f654e702f61d619b238ab1091c42e6b06387787a1ecbN
Size

235KB
MD5

ddfac1a2df281b072ce0ee3e2e513960
SHA1

81cf3f84ea01d2b3f713a77bebd9bf02ab9ac02e
SHA256

68cb4b0afbaf60b6c163f654e702f61d619b238ab1091c42e6b06387787a1ecb
SHA512

c154df4b90d0d484aa478680558c680075469a839f781ca8ac5e0040e932fa2071a250fee6ec0f1a19aef1f7f0ee283ed7a9f6ee57ad531ea33df6d7d1ce473a
SSDEEP

3072:xmkHdE+02qRIGYrP6OUHgz5dHtSyXQTxaxz2lJE2cWUQlaQMpjlaFKcy:xJdDkcP6Oygz5dNVQizgyRjsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68cb4b0afbaf60b6c163f654e702f61d619b238ab1091c42e6b06387787a1ecbN

Files

68cb4b0afbaf60b6c163f654e702f61d619b238ab1091c42e6b06387787a1ecbN
.exe windows:4 windows x64 arch:x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.chxv
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE