0259af72898bb16da9d2aeb3fedaa0e7 | Triage

Sharing

General

Target

0259af72898bb16da9d2aeb3fedaa0e7
Size

355KB
MD5

0259af72898bb16da9d2aeb3fedaa0e7
SHA1

98e3ee6e4e65e2bb64d541281e80e000c0715bb9
SHA256

4fb7d7697ef4aa0406590e00b5dde575fd4a569e7a0b415a7e2dacfd68d64d58
SHA512

9c78bb1292b78d5e03d4928a70e25569de9ce81c6fa9fd236b3d34ff73de041509c73c13705a64563600667ca7b775ec36e9f2fc7f1e52e5021ae3435bb4722f
SSDEEP

6144:EDoZ3fsu8isVVRdB4etHsWDZv8jU2JbcfGxcdbL70ktF/wNJRDQ91LC1s7cO/V+:iVu8iE/B4etZDZvexeLbwbRcbCC7cO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0259af72898bb16da9d2aeb3fedaa0e7

Files

0259af72898bb16da9d2aeb3fedaa0e7
.exe windows:4 windows x86 arch:x86

93bf08e13eb1580def6e1c8cf2172289

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
TlsGetValue
ExitProcess
CreateFileA
CloseHandle
GetComputerNameA
GlobalFree
VirtualAlloc
FindClose
FindAtomA
lstrlenW
TlsAlloc
GetLocalTime
GetPrivateProfileIntA
GetFileAttributesW
GetLastError
GetModuleHandleW
GetTickCount
GetStdHandle
SetLastError

user32

DestroyCaret
EndDialog
CallWindowProcA
GetDlgItem
CloseWindow
GetCaretPos
GetClientRect
FillRect
GetClassInfoA
DrawStateA
GetMenu
CreateWindowExA
DispatchMessageA

clbcatq

DllGetClassObject
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate

d3dim

D3DFree

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ