1d7817f2558f6134e7b7ccc6c7227362 | Triage

Sharing

General

Target

1d7817f2558f6134e7b7ccc6c7227362
Size

63KB
MD5

1d7817f2558f6134e7b7ccc6c7227362
SHA1

1e4dc45f8dca0432cec0d90e64844e0ecbd78ec1
SHA256

c25bb557dad04e3043688fc4ace89987f5df637c8291f1ea26dbc1c4bfe8ef83
SHA512

43155077593140da84c21f38eee9046cac90411a5fcd2c2b05c2bde109398e1f23ae506947145cc8a159b225e9bf079b78132fce52b6699cf5473dafb82de546
SSDEEP

1536:P013MhtGriLBtOypP7AK0E/7U+xuRyE7E4KVOnWIUdg:6riCypP7vPT1u4EoPw1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d7817f2558f6134e7b7ccc6c7227362

Files

1d7817f2558f6134e7b7ccc6c7227362
.exe windows:5 windows x86 arch:x86

aac56292baee69b140269b185a08bbfb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetTickCount
lstrlenA
GetSystemTime
lstrcpyA
GetLastError
GetVersion
CloseHandle
WriteFile
CreateFileA
GetTempPathA
FindAtomA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetWindowRect
EqualRect
ClientToScreen
GetCursorPos
GetCaretPos
IsWindowVisible
GetFocus
InflateRect
wsprintfA

shlwapi

SHGetValueA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE