499d68914c6d1e9991fe89f5860ec316[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

499d68914c6d1e9991fe89f5860ec316.exe
Size

364KB
MD5

499d68914c6d1e9991fe89f5860ec316
SHA1

f2ac550f146044dc89d9f833375b7d1a41371dc8
SHA256

20ed61b4a736f36a9d6f6322f9cd8171a1078f693db3fc25697fb2edec62f5ea
SHA512

0707efed6494f5f89df256ada6523a45d75fd791216ac3aea1102f069ab51998ff1605636f375e35c28e3d0282ecfe91e624e19f6ea107eec22686ee8d86ccf4
SSDEEP

6144:HJCZByXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:HScMFOkbV5f0H2DeJxZaZPJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
499d68914c6d1e9991fe89f5860ec316.exe

Files

499d68914c6d1e9991fe89f5860ec316.exe
.exe windows:4 windows x86 arch:x86

64f1db18bb9c1c7a4c5c988ffd76d90a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
CreateMutexA
DeleteAtom
FindResourceA
GetEnvironmentVariableA
FindClose
GlobalUnlock
LoadLibraryA
HeapCreate
GetModuleHandleA
IsBadStringPtrW
ExitThread
SetLastError
CloseHandle
PulseEvent
TlsGetValue
ReleaseMutex
CreateFileA
GetACP
lstrlen

user32

CallWindowProcA
DrawEdge
SetFocus
DrawMenuBar
GetDlgItem
CopyRect
GetIconInfo
DispatchMessageA
FillRect
GetDC
IsWindow
DefWindowProcW
CheckRadioButton

msasn1

ASN1BERDecBool
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ