0568af40910c562a5fef7af2a13261a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0568af40910c562a5fef7af2a13261a9
Size

144KB
MD5

0568af40910c562a5fef7af2a13261a9
SHA1

65971d46328a607dac2dbe4f13a9ea0dcd6f101e
SHA256

e8f2da1d22dcef0682cfb66afcdaeb9b009e9d02259470e7b3d536c13cbdbee4
SHA512

b79404d01e2e07357267c8644344e5437eaab9c28c04785fc207639f27e7542d656e8fffd3becd6db599724ab60ec1ba9d25b4041620c6777244184c0fec7513
SSDEEP

3072:V7GeKlHoSvQ0tRpSFsOTHHrdT+cT3B0DBpq7qZ2o2LlmSbReH:Vvso6HMZHkDBZZ2bLlm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0568af40910c562a5fef7af2a13261a9

Files

0568af40910c562a5fef7af2a13261a9
.exe windows:4 windows x86 arch:x86

b59bedf0c28781f157b9b450c0026ffa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualProtect

msvcrt

fwrite
strncmp
wcscmp

user32

SetCapture
FindWindowExA
SystemParametersInfoA

comctl32

CreateStatusWindowA
InitCommonControls
ShowHideMenuCtl
CreatePropertySheetPageA

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ