75f424824a1959dff27e844a8f7a126b | Triage

Sharing

General

Target

75f424824a1959dff27e844a8f7a126b
Size

97KB
MD5

75f424824a1959dff27e844a8f7a126b
SHA1

a099589efe81acde6109c3e648bff0d11d557800
SHA256

04be5092d2b7af6e1b13d537b1358cabb37250f24e325187977a234d636ae840
SHA512

caab3c2ed013752e0a79b6aa42ee27baace01697d8d085a4cce75ed93d71b5c2f1cb2fd4f8539e5ed908201767ecf52f808e254db5e7ca05cec96c442101b8af
SSDEEP

1536:5DL9bO4Duj/ntb8dsDXa/7HuC1p31AMVWQ98xTS3M4bi:5DL9FaN8d+XaDOC1pKsWQ9ES3M2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75f424824a1959dff27e844a8f7a126b

Files

75f424824a1959dff27e844a8f7a126b
.exe windows:5 windows x86 arch:x86

366169ffa192a049deb66bbca06eed34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetParent
GetDesktopWindow
ShowWindow
CharNextA
TranslateMessage

kernel32

GetCurrentProcessId
GlobalFindAtomW
QueryPerformanceCounter
GetACP
GetThreadLocale
GetUserDefaultLangID
CopyFileA
VirtualAlloc
VirtualFree

gdi32

DeleteObject
CreateCompatibleDC
MoveToEx
CreateSolidBrush
SelectPalette
GetPixel

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 863B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Gtru Eyi
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ