62904527192195e924a312d784d711f8a1629063d76123152de24cd8f6bee5e7N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62904527192195e924a312d784d711f8a1629063d76123152de24cd8f6bee5e7N
Size

1.9MB
MD5

4a850e9c180a36dce05cc6f82bb387b0
SHA1

8149afeb4ca7217d53cd0eb38b2a069e7c1a8fd2
SHA256

62904527192195e924a312d784d711f8a1629063d76123152de24cd8f6bee5e7
SHA512

320dd2539c2c894ae80ad414930397e0013a59459e332a5be1d53540b6e9e299fc652b2e272e66d8c4a17891e52654c031500c6cdc43938ab6aeaedae86ad2ec
SSDEEP

49152:me/ReENKDLho9ErmuskFXB0o1Be1ZVjX:Kx1o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62904527192195e924a312d784d711f8a1629063d76123152de24cd8f6bee5e7N

Files

62904527192195e924a312d784d711f8a1629063d76123152de24cd8f6bee5e7N
.exe windows:4 windows

5625e5eda65ca5dd513b65bf9b00f422

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetVersion
VirtualAlloc

user32

GetActiveWindow

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE