0951a76aae19070e0c5c12c9bf5aae6c | Triage

Sharing

General

Target

0951a76aae19070e0c5c12c9bf5aae6c
Size

337KB
MD5

0951a76aae19070e0c5c12c9bf5aae6c
SHA1

05b403b0fb923573ccc8c830f89514669730671d
SHA256

16b4493bbec58065c9c85215099993b8b960d4a0a25b0e67605343463a9f27e3
SHA512

22c5530bd2746a589ca92aef13491060c99c6264de61879db6e820af85f42206fbebc960bc2866027184f8f9961b21354e7aa479d04c658451545a57d0f105bb
SSDEEP

6144:/a7Fhjrxd4lakFcJtX7HW5XH7Xv6Ak2GBJR1ND1iS6uq3kPdyumdBFN:iFhj1CrFc3X7HoHj2D/z6fUA/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0951a76aae19070e0c5c12c9bf5aae6c

Files

0951a76aae19070e0c5c12c9bf5aae6c
.exe windows:4 windows x86 arch:x86

c59e7643204811465795d1c0122ceb9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
LoadLibraryW
FindAtomA
LocalFree
HeapCreate
LoadLibraryA
ReleaseMutex
GetFileAttributesA
GetCommandLineA
SetLastError
CreateFileA
CloseHandle
CreateThread
GetComputerNameA
lstrcatA
GetDiskFreeSpaceW
SetEvent
ReleaseMutex
GetDriveTypeW
GetTickCount

user32

SetFocus
DrawStateA
DestroyCaret
CreateWindowExA
CallWindowProcA
GetClipCursor
GetComboBoxInfo
GetClassInfoA
DispatchMessageA
GetDlgItem
GetKeyState
FillRect
CloseWindow

cryptnet

CryptGetTimeValidObject
CryptGetObjectUrl
CryptUninstallCancelRetrieval
CertDllVerifyCTLUsage
CryptCancelAsyncRetrieval

desk.cpl

DisplaySaveSettings

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ