068b96ec2a520caf46a59385b9910b282cd240fd43840e20e3c367b7cd010cfe | Triage

Sharing

General

Target

068b96ec2a520caf46a59385b9910b282cd240fd43840e20e3c367b7cd010cfe
Size

305KB
MD5

1b7df1a423ea6282063fd060266862c6
SHA1

b78873befbfc35d28efbe685c6b6ab858ba66174
SHA256

068b96ec2a520caf46a59385b9910b282cd240fd43840e20e3c367b7cd010cfe
SHA512

7aafd159eb0d78d788d241a0635acee0f58e12f9be9faa8609bfee6f7f120f1a939604a41ce31558a0a978ce02545d929ae1b615b863ecb37d0cb5a89ed8d7a8
SSDEEP

6144:jJHGyoPwcMZAwSYQ1rL4OgbDetAfhiRdsLvOJ0tYRVlOPAKeJNO4:RGyoPwcMZhnQ1rL4OKDeMhi3sLv7cY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
068b96ec2a520caf46a59385b9910b282cd240fd43840e20e3c367b7cd010cfe

Files

068b96ec2a520caf46a59385b9910b282cd240fd43840e20e3c367b7cd010cfe
.exe windows:5 windows x64 arch:x64

8a792fd08e94ba82ebadf5c69edfa32e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA
GetSystemInfo
LoadLibraryA
GetVersionExW
WaitForMultipleObjects
GetProcAddress

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.x64
Size: 278KB - Virtual size: 280KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE