fd9342d3cfc7abbf50db0b3744b4ec3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd9342d3cfc7abbf50db0b3744b4ec3f
Size

215KB
MD5

fd9342d3cfc7abbf50db0b3744b4ec3f
SHA1

40289c84a82fcf4491b0d65496362b308cf5f1e8
SHA256

bde7efcdb9fdefa53b750a7071384fcd0b4df6c8e15b7eca83ed966f8b609f35
SHA512

8049f50d4b95f27312cb039f3104e0a0ecb9c734bfde20fb60853c8ebbbb0d1c5acff114113b12289907e0dfe980f55bbe88667da93c319c846197d9c26ef4ff
SSDEEP

6144:YzmtEGaZOq/OuPwmeQ4ID/YeZq5EWRsXnfYwRJ:vEOZu4rQ4CcyAwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd9342d3cfc7abbf50db0b3744b4ec3f

Files

fd9342d3cfc7abbf50db0b3744b4ec3f
.exe windows:5 windows x86 arch:x86

7f4c307c62abfacddfb1d48e29f91a43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowVisible
IsWindow
BeginPaint
WindowFromPoint
EndPaint
SetWindowTextA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA

gdi32

FrameRgn
CreateFontIndirectA
DeleteObject
GetTextColor
SetRectRgn

kernel32

GetThreadLocale
GetPrivateProfileStringA
SetFileAttributesA
GetLastError
GetCurrentThreadId
GetEnvironmentVariableA
GetStartupInfoA
InitializeCriticalSection
GetTickCount
HeapFree
HeapDestroy
RtlUnwind
GetEnvironmentStrings
HeapAlloc
FreeLibrary
HeapCreate
GetProcAddress
LoadLibraryA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ