60e3d80d6ccea5973b5c752994dec3d4040e90ae266b2de9b8db3d547b71cccbN | Triage

Sharing

General

Target

60e3d80d6ccea5973b5c752994dec3d4040e90ae266b2de9b8db3d547b71cccbN
Size

39KB
MD5

a0f584384eec4f8a67ee2c175dbb6510
SHA1

253ff9154ad631d3bf3b635483eaf08c89432970
SHA256

60e3d80d6ccea5973b5c752994dec3d4040e90ae266b2de9b8db3d547b71cccb
SHA512

948ee5f9c96de9faca5691759edba4b73e999bb21a3b770d5ed746903e6605f3ca04306bdfb76a7f8e70b9a7a58b1580497ea44ebaf1fdb39b5f706a34b37430
SSDEEP

768:2MluzSk+ZS27TRG6+ognTnD/92CxrEDKUyZpC8Y8e/mTntuGQSyoEyEs:mSkYSEAmSzj9QD+uwEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60e3d80d6ccea5973b5c752994dec3d4040e90ae266b2de9b8db3d547b71cccbN

Files

60e3d80d6ccea5973b5c752994dec3d4040e90ae266b2de9b8db3d547b71cccbN
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ