f90981104d42394f322d41b240c32f1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f90981104d42394f322d41b240c32f1e
Size

123KB
MD5

f90981104d42394f322d41b240c32f1e
SHA1

da14eb21ac254ffcd550117870456d06124d556d
SHA256

dd74b672f355394ef4c05b24ecfd71f44074882d97a0707121f75da4ea6c8a9c
SHA512

48fe3eb5c843ba6011013dad931c63b710831ee2c8b6ef8237ca96656cb674fccd59904e193fcf3109d92df91508353e8b3475e78716b3575440c282443bddee
SSDEEP

3072:DbRioTyqdE2WnwUdWILoCIPvFGuMl6fjjmk9:DbR1E2WnwUIIDqvFGll6fj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f90981104d42394f322d41b240c32f1e

Files

f90981104d42394f322d41b240c32f1e
.exe windows:4 windows x86 arch:x86

d477960c5f95b9dba28bd87f39c89e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ