2903402370c200a0eb4fa15a3a62ca39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2903402370c200a0eb4fa15a3a62ca39
Size

857KB
MD5

2903402370c200a0eb4fa15a3a62ca39
SHA1

1e71f1c5aaea04a41196c0af3c1529801bd5a79b
SHA256

1da6d514374ce3d33fae5bf3f68a707c1ea0c7ef8296fdd793d37c3f08746067
SHA512

8980cedbcc28f0324af259c44e86a4a731f9cda609d84a3fa02091650817042ace62455064d5e5262975e145b6b2503d9f04f4938aedb65ff1899bc6f289b453
SSDEEP

24576:cF4JuV++J++++YdtLQFFFFw54darCh3JFJNayzxwSagb5:5uV++J++++YdtLd54/h3nDvxfb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2903402370c200a0eb4fa15a3a62ca39

Files

2903402370c200a0eb4fa15a3a62ca39
.exe windows:4 windows x86 arch:x86

19e6c1d49a6ea20707d517f5e2b335eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

kernel32

GetUserDefaultLCID
TlsFree
TlsAlloc
GetModuleFileNameA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
lstrlenW
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LoadLibraryExA
CompareStringW

ddraw

DirectDrawCreateEx
DirectDrawCreate

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ