411d26128ce657aa0515af7f840dbd14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

411d26128ce657aa0515af7f840dbd14
Size

787KB
MD5

411d26128ce657aa0515af7f840dbd14
SHA1

652fb746b6fcd2868373863941827be38ceaba56
SHA256

0057776c72f9d3ef3c76fda36c283702d3dfa9b3bc1212261df88a3fcf0ba671
SHA512

08f54e6a965d000e39a7cd25cbc5665c92c8063a4f9651d6e27fc00372e76efa989caaccee475ec3250a77b16ef0212cce379f35fa8e2848ae8b53b9764e8c16
SSDEEP

12288:zr94K9Vysrx849AMH7zODVi3oHjyJtciGZplyjWrvvrvXk1dRIZFdP:zr6CgOh9j/Ohi3WmZWlygvvrXk14Hd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
411d26128ce657aa0515af7f840dbd14

Files

411d26128ce657aa0515af7f840dbd14
.exe windows:4 windows x86 arch:x86

0d8527bc60a32849f198b8b82ac5f8e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
DeleteAtom
IsBadStringPtrA
FindResourceA
GetEnvironmentVariableA
TlsGetValue
GetACP
SetLastError
ExitThread
CloseHandle
GetTickCount
CreateMutexA
HeapCreate
FindClose
ReleaseMutex
CreateFileA
LoadLibraryA
GlobalFree
GetModuleHandleA
PulseEvent

user32

DispatchMessageA
GetDlgItem
GetDC
DrawMenuBar
CopyRect
FillRect
SetFocus
IsWindow
CheckRadioButton
DefWindowProcW
DrawEdge
GetIconInfo
CallWindowProcA

msasn1

ASN1BERDecNull
ASN1BEREncBool
ASN1BEREncEoid
ASN1BERDecCheck
ASN1BERDecBool

dpnet

DirectPlay8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ