72cfccb9ede8498b802218315f0ddbe3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72cfccb9ede8498b802218315f0ddbe3
Size

444KB
MD5

72cfccb9ede8498b802218315f0ddbe3
SHA1

d0c3d38ead5a01838cf25a69ae94d01bc0abac44
SHA256

fedfbcd93e5d8930e05563fcd808876e5102532e5d977893a15ea83ef2035840
SHA512

a1f77e1a2b58c262352ae9adeba4afca4abe8a6f22f52617b020c6a749e2c181c7210eaa5645309da70787136d13f21464dff3b5f01fd1cac3dfdde6b86c8947
SSDEEP

12288:gOfPLmzBfz1pC6hPzR5tQAPj5F6UKgew2ffxq2KGF1OI:7fke69mW9xK3w23xq34b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72cfccb9ede8498b802218315f0ddbe3

Files

72cfccb9ede8498b802218315f0ddbe3
.exe windows:4 windows x86 arch:x86

5128fa68d6df3f49dcf1daf5624960c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

DbgUiSetThreadDebugObject
NtSetHighWaitLowEventPair

advapi32

ChangeServiceConfigW

ws2_32

WSAUnhookBlockingHook

kernel32

GetConsoleWindow

user32

GetDesktopWindow
GetKBCodePage

Sections

.text
Size: 439KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE