fc541385e8599bcbb777335ec853fdf9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc541385e8599bcbb777335ec853fdf9
Size

223KB
MD5

fc541385e8599bcbb777335ec853fdf9
SHA1

515e234d96fd8cad2644f8268a6cad5875701a17
SHA256

7dfb7544ca9fdb1d307cdeb6ff03c5a0d3b25ef6259b8b7c71d3deb21f2d989b
SHA512

e7dd79f72d71a99c57392074d5eecf678400bb69bb12c305071b646bce57724d19205d4c10da193f3d687c1492a9a7787276a220f60886239ec2c5d5e63bea55
SSDEEP

6144:Z1kK+bvcTXjEh/x/XGICW+ZPZrwupApFq97gch+K3PD3:gKk0TX4h/x/W5WU9ApFqdtQ4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc541385e8599bcbb777335ec853fdf9

Files

fc541385e8599bcbb777335ec853fdf9
.exe windows:4 windows x86 arch:x86

1d5567437bd35ac38df3b07d520a7bb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayPtrOfIndex
GetErrorInfo
SafeArrayGetUBound
SysStringLen
VariantCopyInd
SafeArrayGetElement

shell32

SHGetDiskFreeSpaceA
DragQueryFileA
SHGetFileInfoA

msvcrt

sprintf
_acmdln
exit
memcpy
asin
atol
wcstol
sqrt

advapi32

GetLengthSid
RegEnumValueA

ole32

CoRevokeClassObject
CreateBindCtx
CoUninitialize
CoReleaseMarshalData
GetHGlobalFromStream
StgOpenStorage
MkParseDisplayName
ReleaseStgMedium
CoGetContextToken

kernel32

GetProcAddress
GetEnvironmentStrings
GetModuleHandleW
GetACP
GetCommandLineA
GetModuleHandleA
lstrlenA
CloseHandle
LoadLibraryExA
GetCommandLineW
CreateEventA
GetOEMCP
VirtualAlloc
VirtualAllocEx
lstrlenW
ExitProcess
GetVersion

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ