313ba6a61476998081b25330d03f2b97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

313ba6a61476998081b25330d03f2b97
Size

372KB
MD5

313ba6a61476998081b25330d03f2b97
SHA1

86b5784e243171fb0975d1c5b9ab7506dbc50d19
SHA256

13e7444004b4165755d3076e6e60f5ba01915b59dec94a08a5f6898dd9b9af05
SHA512

42011dc0b7c3a9ba2b39b90a19f3b521a4bdbfbba0f20b82c295a9ec4ca992e896e08ffbf291e20881a51fa02031175aba06357abf678adb68485f3f6bc08302
SSDEEP

6144:wJhK6TQRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:AhK6TQneF8m4ewS/HcF+ih7wp10l1h+H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
313ba6a61476998081b25330d03f2b97

Files

313ba6a61476998081b25330d03f2b97
.exe windows:4 windows x86 arch:x86

d94106dddc8aa5e2c7262f1cce5053ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetModuleHandleW
ExitThread
VirtualAlloc
GlobalFree
FreeConsole
FindAtomW
GetComputerNameW
GetPrivateProfileIntW
CloseHandle
lstrlenA
GetTickCount
GetLocalTime
LocalFree
GetExitCodeProcess
FindVolumeClose
GetFileAttributesW
GetDriveTypeA
GlobalSize
CreateFileA

user32

CloseWindow
GetClassInfoA
GetClientRect
FillRect
CallWindowProcA
EndDialog
DrawStateA
DispatchMessageA
GetDlgItem
CreateWindowExA
GetCaretPos
GetMenu
GetCursorInfo

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate

msexch40

DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ