2998fd33b6fda8169dacddfa12a4854f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2998fd33b6fda8169dacddfa12a4854f
Size

73KB
MD5

2998fd33b6fda8169dacddfa12a4854f
SHA1

6b438fc231917141f748e9b82cd5c9c84383e471
SHA256

e62b15112f544bc9b6b7c1cd65af2f0d0c31a6ab6a8b005bf024a66e6368b553
SHA512

4239f513e1b337cc7638fc54c6a5e6a516f4cbe0f002a346f3649f84760b5c9a58faf09c1807e85726a8498c857b8cc8816138ef59b88430d0338c75abd3fa51
SSDEEP

1536:lRRrTsc3H4WW4+mDh5/kX9GzxP0QkLSjWTU6T5Z5Y/:dMc3HLh+mDf/kXENPHkgo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2998fd33b6fda8169dacddfa12a4854f

Files

2998fd33b6fda8169dacddfa12a4854f
.exe windows:4 windows x86 arch:x86

ddaa08ec4ae1b0eccc5bd12fd3bb8c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

Sections

.text
Size: 47KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE