131f285dbb2283d5a29f48b1fb928e62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

131f285dbb2283d5a29f48b1fb928e62
Size

168KB
MD5

131f285dbb2283d5a29f48b1fb928e62
SHA1

41892f465dfaee83e4239370858986234ae5f3b6
SHA256

441610064f3fe558c314310adc2de460fdb2515e6227b42ddfc44bf902b71539
SHA512

38309da1a41e472b1425eec4f8324ff0fb48a77895d2a3054cc48a688c7811f34a9aafea9abc5143a5750ebf6f858509be0a6b948fc4b5e2f745271a413c5425
SSDEEP

3072:rSWK1z9Jd4OoLZmtqEBvgSjulo1ZqtneiTk9KdgpuXab+kFU+E6j:rwdAwhB4SjBmNpuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
131f285dbb2283d5a29f48b1fb928e62

Files

131f285dbb2283d5a29f48b1fb928e62
.exe windows:4 windows x86 arch:x86

3872a0cbc0ac8dec5c481ecbed42f22f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

GetOEMCP
AddAtomA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetCPInfo
WriteFile
EnumResourceLanguagesA
UnhandledExceptionFilter
GetStringTypeExW
FreeEnvironmentStringsW
GetStartupInfoA
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

user32

GetDlgItem
SendMessageA
IsWindow
EnumChildWindows
CreateWindowExW
DestroyWindow
GetWindowThreadProcessId

Sections

.text
Size: 85KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ