205da0c9e5058b3c56a0ae34a96613e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

205da0c9e5058b3c56a0ae34a96613e4
Size

26KB
MD5

205da0c9e5058b3c56a0ae34a96613e4
SHA1

fc349f7e13586234fa0b8f2fef3a538050262090
SHA256

61e8f1772ec49e6da12c5b2098b0085465e5130466bb115d7a27186693888b6b
SHA512

66cc0be0d2e3fcd019e76dd6185bbdc70f4030a8359c4aa0b79a70553c85f68eac14196b149260feaf161fb159057c534ef54ad8c4ceda53053d8eb934f8c5c6
SSDEEP

384:riLNydwMlIu8c/ZsgrtOL5Rrjv6ufzVyrBYfiVwTkQgO7O9:riL0dl+GagrevIrBiiVhZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
205da0c9e5058b3c56a0ae34a96613e4

Files

205da0c9e5058b3c56a0ae34a96613e4
.exe windows:4 windows x86 arch:x86

bbeec381ef4fead399c53c0750caa1d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
GetConsoleMode
HeapCreate
CreateMutexA
GlobalUnlock
GetStdHandle
SetLastError
TerminateThread
TlsGetValue
lstrlenW
GetModuleHandleA
Sleep
GetCurrentThreadId
CloseHandle
FindResourceA
SetEnvironmentVariableA
PulseEvent
LocalFree
CreateFileA
ReleaseMutex

user32

CallWindowProcA
DrawMenuBar
DrawEdge
CopyRect
SetFocus
FillRect
GetDC
CheckRadioButton
GetIconInfo
DispatchMessageA
IsWindow
GetDlgItem
GetClipCursor

apphelp

SdbCloseDatabase
SdbGetDatabaseID
SdbFindFirstTag
ApphelpCheckIME
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE