ffb10f40588e61cd62496548228ce3d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffb10f40588e61cd62496548228ce3d2
Size

11KB
MD5

ffb10f40588e61cd62496548228ce3d2
SHA1

12d8f4b4801bfc2c30aaa64008b26aa8dde72c96
SHA256

a21b6686cde6a09e49f51286a47e13b5d44891d1c60ec0fd4ab10bb22e98e400
SHA512

09a1e1d90718c14857b82c021b0ed35506fad4e8d35d985f535c90cf7ea866b7d3aea9b535e59d968ad80def73538eb4db4a566d17e7d7e2ab2ae501b3c1eda6
SSDEEP

192:xfoEC8fOFulLRxMlsz/qjPMO/o5FsjUhmEtWpyjXkkrh2suNzF8Bp9/AWxeC:hxfOclMWyjklAUhHOkUk12PNz8p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffb10f40588e61cd62496548228ce3d2

Files

ffb10f40588e61cd62496548228ce3d2
.exe windows:1 windows x86 arch:x86

2ef258e53a4a0f0f5c4ca9e8699d6d0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateMappedBitmap
ImageList_Duplicate
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetImageRect

gdi32

ExtCreateRegion
ExtFloodFill
FrameRgn
GdiGetDC

kernel32

GetCurrentThread
GetFileSize
GetLocaleInfoA
GetOEMCP
GetProcessAffinityMask
GetProfileSectionA

user32

CloseWindow
CopyIcon
CopyImage
CreateCaret

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE