00db481b814c986d95cc5dd02167af24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00db481b814c986d95cc5dd02167af24
Size

65KB
MD5

00db481b814c986d95cc5dd02167af24
SHA1

f1d1bea3ecdde228df988097b9cff37515d07a35
SHA256

ed99dfe71a7fd27c7accfcafcd29ead8f641a7e387f0e580c67bb4ec8b27d838
SHA512

54c9e3671e3034f7c773371c7b0173b1945c8a537c6250571cb3fbb0f20121fd0b789dbf9f636b9d1c5ff39ea478ed497a922a031025fff9709053e2cb57f05d
SSDEEP

1536:iZ/DbdfK0BtnETkIKdLNxUULsHF18lPG+FWX18yb+CFL/jHxWW:y/DbdCUk4rz/FWX18yy4/wW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00db481b814c986d95cc5dd02167af24

Files

00db481b814c986d95cc5dd02167af24
.exe windows:4 windows x86 arch:x86

97299e6523b193fc57c0c55dff7da8e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
GlobalUnlock
GetSystemRegistryQuota
GlobalAlloc
GlobalLock
ReadConsoleA
GetThreadLocale
GlobalFree
CreateTimerQueueTimer
VirtualAlloc

tapi32

lineSetCallData

user32

GetWindowPlacement
EnumPropsExW
GetWindow
CreateAcceleratorTableA

Exports

Exports

Wykyordvr
Mhfcvkslrsv

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ