75b6ab569f557bc162b854f0541bd0e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75b6ab569f557bc162b854f0541bd0e4
Size

41KB
MD5

75b6ab569f557bc162b854f0541bd0e4
SHA1

fad7d0dad0d7a1bb61b732345da89da06d50d7c6
SHA256

dd567618d8d80d56237fa751613775aa0d1ee8cb9207d39c4d4023905ba8d3b0
SHA512

5e366a79eaa18b3d4bb9300f9864a8827fdad319565b93031634fab9904685ba799caa8f4ef23b4215b4be0e0cdaed16aa2d6b31fc08bc69987f5572face1e34
SSDEEP

768:aWOCsHnLjaddRWLu0fKiFrB2njt/cGonnr2Wyp26w/BD:aWOCsHnHaTRWL1iQrBKjh+nn626kBD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75b6ab569f557bc162b854f0541bd0e4

Files

75b6ab569f557bc162b854f0541bd0e4
.exe windows:4 windows x86 arch:x86

1510c071e1e1bd850663f22ff8ac2e16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CompareFileTime
GetModuleHandleA
SetLastError
InterlockedExchange
GetConsoleCP
GetVersion
ResumeThread
lstrlenA
GlobalUnlock
VirtualProtect
GetUserDefaultLangID
LoadLibraryExA
GetConsoleDisplayMode
HeapCreate
WaitForSingleObject
GetCommandLineA
GetAtomNameA
WaitForMultipleObjects
GlobalSize
HeapReAlloc

user32

FillRect
FrameRect
wsprintfA
CreateIcon
AnyPopup
SetForegroundWindow
GetClassNameA
BeginPaint
DragDetect
GetDC
EndPaint
GetCursorPos
GetParent
ShowWindow
GetTitleBarInfo
ReleaseDC
GetFocus
DrawTextA
GetWindow

rastapi

DeviceListen
DeviceConnect
PortClose
AddPorts
DeviceDone

quartz

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE