fe06627799db99d13cdba6da3dd0a499 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe06627799db99d13cdba6da3dd0a499
Size

373KB
MD5

fe06627799db99d13cdba6da3dd0a499
SHA1

d8f3b3f5f4cc8ef93bb368c0e0b19dca6d7e1337
SHA256

36a01de9a5c7b83aa6438b35840b5aea2cb4be51ac881c66ce0ab15c69c8bc6b
SHA512

6af0dfc46db7ac527d1ee463dd766ba99e36439c3f28e9da7a7494ccedb68d2139daff5ccc570419ba2f46a41c059071622e3e99cc6e31028488f41348e3ecb5
SSDEEP

6144:nSuSysRZvOL3a//WYO3NlslhsXvazXrQD5MST6SHeEe5zcqpqj8Dmne1mk:RYOLsu9lsjqiDaPHeFyqpK+mI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe06627799db99d13cdba6da3dd0a499

Files

fe06627799db99d13cdba6da3dd0a499
.exe windows:4 windows x86 arch:x86

042a3e5e808be14bfed453560445e942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetModuleHandleA
HeapDestroy
LoadLibraryExW
FindResourceA
CreateMutexA
ReleaseMutex
GetLastError
GetACP
TlsGetValue
FindClose
SetConsoleCursorInfo
LocalUnlock
CreateFileA
ExitThread
FreeEnvironmentStringsA
UnmapViewOfFile
GlobalFree
Sleep
HeapCreate

user32

DrawMenuBar
GetFocus
CheckRadioButton
DispatchMessageA
FillRect
CopyRect
GetDlgItem
GetIconInfo
IsWindow
CallWindowProcA
GetDC
DefWindowProcW
DrawEdge

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ