fd814b5908fdc5562e9e59eb8235235f | Triage

Sharing

General

Target

fd814b5908fdc5562e9e59eb8235235f
Size

359KB
MD5

fd814b5908fdc5562e9e59eb8235235f
SHA1

2108e081d4c9629d4b21969f48cd675d963a04b4
SHA256

9c14eb5677dc346098252cff238e05a64f6906e7f6539410db6bdc0e4d973971
SHA512

2b6f04bb4fe0ab0b794d45d3d03d47a2a6317827f239da2a465db8adb60e140fb5338305be08a7790ccfe439747d0d15e145eeaa144ef528dfc62b8eba6a9347
SSDEEP

6144:keHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2Ir:keR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd814b5908fdc5562e9e59eb8235235f

Files

fd814b5908fdc5562e9e59eb8235235f
.exe windows:4 windows x86 arch:x86

61811e96d1a7565f5f401e48660e88be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetSystemTime
GetDiskFreeSpaceW
GetComputerNameW
FindAtomW
ExitProcess
ReleaseMutex
GetModuleHandleW
GetCommandLineW
CreateFileA
GetTickCount
ReleaseMutex
LoadLibraryA
GetDriveTypeA
lstrlenA
LocalFree
CloseHandle
HeapCreate
ResetEvent
GetFileAttributesA

user32

DestroyCaret
GetClassInfoA
GetComboBoxInfo
FillRect
EndDialog
GetMenu
CreateWindowExA
DispatchMessageA
CallWindowProcA
DrawStateA
GetCaretPos
CloseWindow
GetDlgItem

rasapi32

RasDialA
DwEnumEntryDetails
DwCloneEntry
DwRasUninitialize
RasDeleteEntryA

modemui

CountryRunOnce

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ