216002d7b1295bd7eb6487f06a50dda2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

216002d7b1295bd7eb6487f06a50dda2
Size

372KB
MD5

216002d7b1295bd7eb6487f06a50dda2
SHA1

819c1479afa11476f09c24d50b56806a82afa2fa
SHA256

2ce58ce385a80d49f29587941dadab3028307bcb167baf0fca3db594fc3e4c6b
SHA512

8cd48f9bb9115bfe6d2602b867931f905e3245c59277000e6cd78575618bad67f35ecf34f7514448b2663bc36e037a714fd542e7cab85c5ee66aac38ffaf05c2
SSDEEP

6144:TygjvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:T3vjVkCrSvoZNyl5fwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
216002d7b1295bd7eb6487f06a50dda2

Files

216002d7b1295bd7eb6487f06a50dda2
.exe windows:4 windows x86 arch:x86

ece9afde2ac72c550f5b0f835562aa96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
SetEvent
GetDriveTypeA
ReadFile
GetPrivateProfileIntW
GetComputerNameW
GetExitCodeProcess
GetTickCount
ReleaseMutex
GetLocalTime
FreeConsole
CloseHandle
VirtualAlloc
GlobalFree
ExitThread
LocalFree
CreateFileW
FindVolumeClose
GetModuleHandleW
lstrlenA

user32

CallWindowProcA
GetSysColor
GetDlgItem
SetFocus
GetKeyState
EndDialog
GetClientRect
GetMenu
GetClassInfoA
DrawStateW
DispatchMessageA
GetCursorInfo
CreateWindowExA

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate

ntshrui

IsPathSharedA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ