132ef1876cc01d6e2ab945a4ab8fcb1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

132ef1876cc01d6e2ab945a4ab8fcb1b
Size

194KB
MD5

132ef1876cc01d6e2ab945a4ab8fcb1b
SHA1

ce11acb5e544bdbba5e471e271d440286f70a48e
SHA256

88901c3eadf2c500eee9aa4065b32be950fc5eaa876bcbdbdcfd6e2edd473282
SHA512

f3f752f6afec16e8eb517729cf1c55e5bc7c60b4193561fcf26c1590b2e066f86c944b0329e70867eb77064a7439cc016e5082b4ffd88d75ad6b9694ef682b07
SSDEEP

6144:KMLyw+9jPBgV0W9owyDKP3FMfRWbSLnQM+Z/v5Ez:/+LzqV0nRKvFMphRG/v8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
132ef1876cc01d6e2ab945a4ab8fcb1b

Files

132ef1876cc01d6e2ab945a4ab8fcb1b
.exe windows:4 windows x86 arch:x86

dbd26b540560d2db206619140055f696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SaveDC
TextOutW
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SetDIBColorTable

wsock32

closesocket
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 38KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 731KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ