418a2432c1609be398702f06bb52b1a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

418a2432c1609be398702f06bb52b1a9
Size

72KB
MD5

418a2432c1609be398702f06bb52b1a9
SHA1

0c76fd4686b3a3f7019924dd592e537f2e42cd68
SHA256

36d16a4ca167786e21a9043ae62023af6ef76e93765a9168244e2efe02c7e3f4
SHA512

17d370aee7d27408ee12b86f4d711ee4cde7441166138ffb767d7a076c3e4b17cb1dcdf7410ab0ad664a306932ee903e6f106d5d5391bff9a39a7157c93e7139
SSDEEP

768:Ez50ZKdbf2QOGUTDMVPcQFZUdvbQ/fM5dX+9Nm04RsrHMHad25i4qdi:Ez5kGUPMWLpbQ/UTO7msrp2E4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
418a2432c1609be398702f06bb52b1a9

Files

418a2432c1609be398702f06bb52b1a9
.exe windows:4 windows x86 arch:x86

65c87e6b49e104170a0b41ccf5593464

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetCurrentThreadId
GetDriveTypeA
IsBadStringPtrW
GlobalFlags
ReleaseMutex
WriteFile
TlsGetValue
ReleaseMutex
GetCurrentProcessId
FindAtomA
GetPrivateProfileStringA
GetFileTime
LocalFree
CreateEventW
lstrlenW
HeapCreate
InitializeCriticalSection
FindClose
GetEnvironmentVariableW

user32

DispatchMessageA
GetClientRect
IsWindow
DrawTextA
GetSysColor
GetKeyboardType
SetFocus
CallWindowProcW
EndDialog
CreateWindowExA
GetSysColor
DrawStateW
GetClassInfoA

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE