feebc64a16f474d5a9b8742eb2470156 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feebc64a16f474d5a9b8742eb2470156
Size

185KB
MD5

feebc64a16f474d5a9b8742eb2470156
SHA1

4640a495e866c116d174727bbe97cc53442eb542
SHA256

e94e35c21f0ed3b61d948b225c7bef1f4994afc7df8483943ceffd65ef6e25c9
SHA512

78001d89c6d173b50d48980b80d3f586587bc3abd7b482a21c3a33582b212ed73c120c221130b9f26a2b5278ffa943fbc7878c8eed5525a5e62da2f90ba398f3
SSDEEP

3072:zFkGUUL3oIEbXDuGtIXZ6OPKQmLo7xw87sXAICyEVHd+u8htw:2FULYIE3u8IXZ663mEW8ByWRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feebc64a16f474d5a9b8742eb2470156

Files

feebc64a16f474d5a9b8742eb2470156
.exe windows:4 windows x86 arch:x86

e2f33b5e677fcd59ef6b8e62d5a33409

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

IsWindow
EnumChildWindows
CreateWindowExW
DestroyWindow
SendMessageA
GetDlgItem
GetWindowThreadProcessId

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

kernel32

AddAtomA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStartupInfoA
GetOEMCP
WriteFile
UnhandledExceptionFilter
EnumResourceLanguagesA
FreeEnvironmentStringsA
GetNumberFormatA
GetEnvironmentStringsW
GetCPInfo
SetUnhandledExceptionFilter

Sections

.text
Size: 97KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ