1dacde8e76fa1677331c2cc17bfc21cd | Triage

Sharing

General

Target

1dacde8e76fa1677331c2cc17bfc21cd
Size

822KB
MD5

1dacde8e76fa1677331c2cc17bfc21cd
SHA1

89dfe27ef9772e9a12a0c70421c71416e6377908
SHA256

47ddcdb36075d54b54e087392d018e087bc1d323bb08ffeb8630f396f067eba2
SHA512

8991db44fe0f6e0d8d4c96789bc5608dd7885d4771202f7090cfed1b5dc87ad0a7ca20bbdb3e1c518501ec2084c0695a774fbdff2489a3632a06bb25a34fc449
SSDEEP

24576:xj+UNmRq86jnSDyuCGQJlie8kXKg9I9UJfUCrRm:xj9mR96DGQJlieRXKg2UBUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dacde8e76fa1677331c2cc17bfc21cd

Files

1dacde8e76fa1677331c2cc17bfc21cd
.exe windows:4 windows x86 arch:x86

35a41bf6e257dbd6520704e8f159bebb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
CreateMutexA
GlobalFree
CreateEventA
ResetEvent
GetDriveTypeW
GetModuleHandleW
lstrlenA
GetCommandLineA
FindVolumeClose
GetPrivateProfileIntW
CloseHandle
WriteFile
GetEnvironmentVariableA
GetACP
InterlockedExchange
ResumeThread
LocalFree
GetExitCodeProcess
VirtualAlloc

user32

CreateWindowExA
GetSysColor
EndDialog
GetSysColor
GetCursorInfo
GetKeyboardType
IsWindow
GetClientRect
DispatchMessageA
DrawStateW
GetClassInfoA
SetFocus
CallWindowProcW

avicap32

videoThunk32
videoThunk32
AppCleanup
videoThunk32
videoThunk32

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 812KB - Virtual size: 812KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ