ff97bfae15b01e3d17d123829388d25b | Triage

Sharing

General

Target

ff97bfae15b01e3d17d123829388d25b
Size

66KB
MD5

ff97bfae15b01e3d17d123829388d25b
SHA1

04b1aec4e01a95a44793f1d181cf9cbb450e6ac5
SHA256

530f86eab402f7c7099c5141f2a1dc4e6947de292153dde19cb0d4a3e7ad332d
SHA512

feaf69445307a40bba9785b2cc6794196f046295e8271f14bf03f257e7e31e78d0fafbe02afbe41c82b5a2a4d3dbb94f9e82c41afb93bf75764a149f4ef03116
SSDEEP

1536:44PtjvQFZ7Fxqlq+MLMRqyBpIRqysUp/ZcyMP:44Ptjv2ZFxqMFyBpOsUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff97bfae15b01e3d17d123829388d25b

Files

ff97bfae15b01e3d17d123829388d25b
.exe windows:4 windows x86 arch:x86

cd1c754622bc2bfdff3aff04aa214e07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
LoadLibraryExA
GlobalUnlock
FindResourceW
GetProcessHeap
SetLastError
GetModuleHandleA
UnmapViewOfFile
TlsGetValue
GetEnvironmentVariableA
GetStdHandle
GetExitCodeProcess
GlobalFree
CreateFileW
CloseHandle
GetCurrentThreadId
HeapCreate
lstrlenW
ReleaseMutex
lstrcpyA

user32

DrawEdge
CreateMenu
CreateWindowExA
CallWindowProcA
DrawMenuBar
DispatchMessageA
IsWindow
CheckRadioButton
FillRect
GetCaretPos
SetFocus
GetDC
GetDlgItem

rsaenh

CPDecrypt
CPSignHash
CPGenKey
CPHashData
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mtfuhyz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE