fc2168f289b7e9b107477ae5d3aa1790 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc2168f289b7e9b107477ae5d3aa1790
Size

36KB
MD5

fc2168f289b7e9b107477ae5d3aa1790
SHA1

36ab194d3f7cd796efe685d2bd464abba0a45f75
SHA256

5c359aae679659fe61c176a32121d5319d28fc2d26eb833ffd566ed22f8aac16
SHA512

3f5873e1239e89aedb2c87914c1508ee9c56ddb31673d58ca10cd855041cfc44ec8b974e478154d81b12833bac2cc36a94ebca2055812ee62a742e140c827ffc
SSDEEP

384:8JEKyf3ZExs4Mphzji0aXIP7Z99JBu5cw:kEPf3VHT97V3Oc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2168f289b7e9b107477ae5d3aa1790

Files

fc2168f289b7e9b107477ae5d3aa1790
.exe windows:4 windows x86 arch:x86

fc75a24ace593fab66484539adf75069

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
FindAtomW
GetModuleHandleA
ResumeThread
GetDiskFreeSpaceW
ResetEvent
LocalFree
ReleaseMutex
GetTickCount
CreateThread
SetLastError
CloseHandle
lstrcmpiW
GetFileAttributesW
SetEvent
HeapCreate
GetCommandLineW
GetComputerNameA
GetSystemTime
CreateFileA

user32

GetClipCursor
CreateWindowExA
SetFocus
GetComboBoxInfo
CloseWindow
DispatchMessageA
DestroyCaret
GetKeyState
DrawStateA
GetClassInfoA
FillRect
CallWindowProcA
GetDlgItem
MessageBoxA

cryptdlg

CertTrustCertPolicy
CertTrustFinalPolicy
CertConfigureTrustA
CertTrustInit
DecodeRecipientID

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE