d62865c6c90ec41ea215e3bb32a8df7e90491fd377a10cffb4efebb3fbdd1c6aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d62865c6c90ec41ea215e3bb32a8df7e90491fd377a10cffb4efebb3fbdd1c6aN
Size

62KB
MD5

50dd2afd680f1011a3b3f8d41945ba60
SHA1

568dd4fd8b88413869238cbe68948260153f7394
SHA256

d62865c6c90ec41ea215e3bb32a8df7e90491fd377a10cffb4efebb3fbdd1c6a
SHA512

349c5507a0b7ff759144ad8e9a5408eec00d1d7cc2377c70cdc75e83ab41ccfb84525386120b84b0aeeec4fe9ff173408124b99ff16a4bc679292f15e1a3eed3
SSDEEP

768:61SRDXnZZJudByo4VtvCYr4oQ3sWwUWUIawfQalLbsrw7iF+gyRMHx:ZRD3ayH/839iaVucX+oHx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d62865c6c90ec41ea215e3bb32a8df7e90491fd377a10cffb4efebb3fbdd1c6aN

Files

d62865c6c90ec41ea215e3bb32a8df7e90491fd377a10cffb4efebb3fbdd1c6aN
.exe windows:5 windows x86 arch:x86

fd1d68a169a2a7ae3397a585f25bba38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

RegisterCMMW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ