63fdeec62e78c9c5c6a4249c4b58b85d34e1ddf7b47f6e46257be4f93b703c72 | Triage

Sharing

General

Target

63fdeec62e78c9c5c6a4249c4b58b85d34e1ddf7b47f6e46257be4f93b703c72
Size

1.7MB
MD5

469d3951ab182e7670feb67f4b461a82
SHA1

c8591e43f3119fde38a725671f883c3eedd3d22c
SHA256

63fdeec62e78c9c5c6a4249c4b58b85d34e1ddf7b47f6e46257be4f93b703c72
SHA512

2994015b87a1d3e106327f4a0132b32d1f60d50c661f002e5092b74caa9844282ac8413ce7c68a4d24d22b8fcf6eff740bf82f8b8c41637f4ac480f8f3c8e5fd
SSDEEP

24576:P0/RLoHZ2AkKIEkK48rktw9E4/vwZ31dvAhuiTFli7X8uZyzo1dqtbVEj3i4zcyz:P0to5lLIxKewS4+KPOX8uQzo16E/cyvL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63fdeec62e78c9c5c6a4249c4b58b85d34e1ddf7b47f6e46257be4f93b703c72

Files

63fdeec62e78c9c5c6a4249c4b58b85d34e1ddf7b47f6e46257be4f93b703c72
.exe windows:4 windows x86 arch:x86

703074f7e4b33aefff112f419dacba1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4218

msvcrt

atoi

kernel32

HeapFree

user32

ValidateRect

gdi32

SelectObject

comctl32

ImageList_AddMasked

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 704KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ