2875cc7f4c23effe9ec18b81352802de | Triage

Sharing

General

Target

2875cc7f4c23effe9ec18b81352802de
Size

57KB
MD5

2875cc7f4c23effe9ec18b81352802de
SHA1

c8284153a21422908fd33400cd9a50eb4e54754f
SHA256

5ef4670ff029d327ad167b4e8ee736ea41508a81473547273cb628646414975e
SHA512

af25b5666c7740ce7024e9489301cbeb224fcdf3b00e8f14db73070e8fc5e18846ed92d89200a7327a2424bc8e484fcb8e42a4694a1989a261eadfc42b2a5c08
SSDEEP

768:jCN+GgZf0nQrzYOAcSLWR7bkzLN0Ps7jFKvvvvWlogagHWXoiVjCzoX7qI5RF7mV:Xd8nQr0OhBRszLN5JtWXooIoXug7m0+d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2875cc7f4c23effe9ec18b81352802de

Files

2875cc7f4c23effe9ec18b81352802de
.exe windows:4 windows x86 arch:x86

642615b6cf52b2c163038cba6de98031

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrlenW
SetEnvironmentVariableA
CreateMutexA
HeapCreate
CloseHandle
GetStdHandle
PulseEvent
TerminateThread
LocalFree
Sleep
GlobalUnlock
GetConsoleMode
TlsGetValue
GetModuleHandleA
ReleaseMutex
SetLastError
FindResourceA
LoadLibraryExW
GetCurrentThreadId

user32

FillRect
GetDlgItem
IsWindow
DrawMenuBar
SetFocus
GetIconInfo
CallWindowProcA
GetDC
GetClipCursor
CopyRect
CheckRadioButton
DrawEdge
DispatchMessageA

apphelp

SdbCloseDatabase
SdbFindNextTag
ApphelpCheckIME
SdbFindFirstTag
SdbGetDatabaseID

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE