f0187712[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0187712.exe
Size

311KB
MD5

8113155f2be43b1f73ecfb357bd7b226
SHA1

96cf982f375e621ba9790097b92945f01ecf5b95
SHA256

cae8cee34ed26ad9af36294eb358f74ae924319aa4d1ded98cf17969c9cc4a3f
SHA512

43015a31bcfcee778cd687204228495a1f7a5617d43116e6e3c8a059e2a35bec17fe842ad194d9cfbb14ab75fe06416a89eae112794a8ec9032e79a579f2b1a4
SSDEEP

6144:XyrQuBlo8CCyd1dUhAE74jvaG66xegV+/mJC63WfP+tN1JB5KK:X8mdjaUq6QgV+OvePG175N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0187712.exe

Files

f0187712.exe
.exe windows:4 windows x86

e291a67fb71949b4eaf40ae126c446ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAllocEx
CloseHandle

user32

GetDC
ReleaseDC
InvalidateRect
BeginPaint
ScrollWindow
EndPaint
PostQuitMessage
DefWindowProcA

gdi32

GetStockObject
SelectObject
GetTextMetricsA
SetBkMode
TextOutA

advapi32

RegCloseKey

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ