165fd8b6c6e14edfe185c3cb88c013ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165fd8b6c6e14edfe185c3cb88c013ef
Size

173KB
MD5

165fd8b6c6e14edfe185c3cb88c013ef
SHA1

fc6d1f7ac7ef4398b02532a96566545aa211c854
SHA256

ddddac76757fdc7d59d901af9b9dd619cbcf2236ea5ceb5be2e76b53d40d15b1
SHA512

b33e8746b87efb14f727c34492f190c0978fdf43f9955058ba794500ca9ee19b38fe10694a433bfb8e6840e968b384e83564a166da8e192842261c158727728e
SSDEEP

3072:DD6HnQrc3zfxhn68xIEmgax/IUUZpQOqI6tbANsdTFAE8C:+jfxhnlxIT/IHZphqI6BssdZT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165fd8b6c6e14edfe185c3cb88c013ef

Files

165fd8b6c6e14edfe185c3cb88c013ef
.exe windows:4 windows x86 arch:x86

0d1f7f5d15911b416bdb252ed6a7fd3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
WriteProfileStringA
GetLastError
GlobalAddAtomA
GlobalAddAtomA
lstrcat
EnterCriticalSection
GetStdHandle
VirtualAlloc
SetConsolePalette
SetCommBreak
CloseHandle
LoadResource
HeapCreate
RaiseException
LocalFree
LoadLibraryExA
GlobalUnlock
GlobalFree
DeleteAtom
IsBadCodePtr

user32

GetActiveWindow
ShowWindow
BeginPaint
GetClassInfoExA
GetClassNameA
GetWindowTextA
GetWindowTextLengthA
GetFocus
AlignRects
DrawEdge
EndPaint
GetWindow
IsIconic
GetParent
CloseWindow
ValidateRect
GetForegroundWindow
ReleaseDC
GetDC

wsock32

WSAStartup
WSASetBlockingHook
WSACleanup
WSAAsyncGetServByPort
WSAGetLastError

linkinfo

CreateLinkInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ