03b79015f9b2300b6a96730db6ce732a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03b79015f9b2300b6a96730db6ce732a
Size

372KB
MD5

03b79015f9b2300b6a96730db6ce732a
SHA1

026f904f9bd7d20174c4d9e3dd0ac0d95219fa67
SHA256

47f0c8f4a4040cea566f3851174be28be742f10c2431eabfea2b6cac8b15b106
SHA512

c8e1d920794828971f9821e3c94b9923f8520aefc00a937b984c711643b5b090c48ab9452748d09d0ab2b47a0088509c29f0a33834dabbb1002f7c2871c32735
SSDEEP

6144:bkajvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:bkGvjVkCrSvoZNyl5fwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b79015f9b2300b6a96730db6ce732a

Files

03b79015f9b2300b6a96730db6ce732a
.exe windows:4 windows x86 arch:x86

f1a662b4b0eae8ff75303bb4430c3b30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
GlobalSize
ExitThread
GetExitCodeProcess
GetDriveTypeA
GetModuleHandleW
GetPrivateProfileIntW
ReadFile
LocalFree
GetLocalTime
SetEvent
GlobalFree
ReleaseMutex
CreateFileW
FindVolumeClose
GetTickCount
VirtualAlloc
CloseHandle
GetComputerNameW
lstrlenA

user32

GetClassInfoA
GetSysColor
DrawStateW
CreateWindowExA
CallWindowProcA
EndDialog
GetClientRect
DispatchMessageA
GetDlgItem
GetKeyState
GetCursorInfo
GetMenu
SetFocus

clbcatq

DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate

ntshrui

IsPathSharedA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ