62ccf06890b8a504642ba555475b40210acc65e7e1a6c1597f2f4d5cac648ae9[.]exe | Triage

Sharing

General

Target

62ccf06890b8a504642ba555475b40210acc65e7e1a6c1597f2f4d5cac648ae9.exe
Size

118KB
MD5

732d3592017d5ff681724a2cc076c06f
SHA1

2d3f20be10ba1d8a78d918d2b02d2b93538ddbd1
SHA256

62ccf06890b8a504642ba555475b40210acc65e7e1a6c1597f2f4d5cac648ae9
SHA512

4f63f68641833fe139e78dc6e187559d3bd93322414e59d2634e68af3902df555109e3f9526e5c670e7a73e5179ada9aca2241e176a165f050cb5e42faa73855
SSDEEP

1536:mWQ/GFgGVuCHIlvcffrrK9uUicpfOY+1JymDjKm9WLGQ5dXlJDDDzW/ok5rH+1NS:QGVuSYqra9MY+tHKb/FJDDDzW/Xe1N0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62ccf06890b8a504642ba555475b40210acc65e7e1a6c1597f2f4d5cac648ae9.exe

Files

62ccf06890b8a504642ba555475b40210acc65e7e1a6c1597f2f4d5cac648ae9.exe
.exe windows:5 windows x86 arch:x86

ba2c3d3c6afbb988e53d3a57c6eb82cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
lstrcmpiA
GetPrivateProfileIntW
GetDiskFreeSpaceA
GetLongPathNameW
HeapCreate
GetModuleHandleA
CreateDirectoryA
FindResourceW
lstrcmpA
LoadLibraryExW
Sleep
WaitForMultipleObjects
GetExitCodeProcess
GetPrivateProfileSectionA
InterlockedExchange
InterlockedIncrement
Sleep
GetFileAttributesA
SetFilePointer
GetDiskFreeSpaceA
Sleep
SetEnvironmentVariableW

catsrv

OpenComponentLibraryTS
DllCanUnloadNow
GetCatalogCRMClerk
CreateComponentLibraryTS

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE