682f8c219a30400271410e81c4724df9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

682f8c219a30400271410e81c4724df9
Size

815KB
MD5

682f8c219a30400271410e81c4724df9
SHA1

fd73c38d6b76edc3790c42e3c618ec08697442b7
SHA256

41e115b96c90c76f2fc096fa05a1b87b6c8d8fa396ba458e855334eb5ea44fd8
SHA512

2298a9999f9759e5937371b539ee52bb9331076476b63bd5dc55cdf73effc67c04f68edc7a3c7dd1bb75e136190d22600b48a986970dbcdb690924440ce2793d
SSDEEP

12288:M9YYK9EqawLN2JtgYHafygfZ/CQpmijJ9MljWMWGCokT6An6LOrdOa:AYrafwLmt2yglhJqjNCoGnVd/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682f8c219a30400271410e81c4724df9

Files

682f8c219a30400271410e81c4724df9
.exe windows:4 windows x86 arch:x86

e008653c122c75ce0cbd2aed469baa53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
MapViewOfFile
CreateMutexA
GetLastError
FreeEnvironmentStringsA
SetVolumeMountPointA
GetACP
ExitProcess
GlobalUnlock
CreateFileA
HeapDestroy
IsBadCodePtr
HeapCreate
GetModuleHandleA
SetLastError
LocalFree
FindClose
FreeConsole
UnmapViewOfFile
LoadLibraryExW

user32

GetDlgItem
DrawEdge
IsWindow
CallWindowProcA
FillRect
DrawMenuBar
DefWindowProcW
GetDC
CheckRadioButton
DispatchMessageA
CopyRect
GetIconInfo
GetFocus
MessageBoxA

uxtheme

DrawThemeEdge
DrawThemeText
GetThemeRect
GetThemeSysInt
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ