58e0c1baad9e1c91c902ebd9a9edc778 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58e0c1baad9e1c91c902ebd9a9edc778
Size

350KB
MD5

58e0c1baad9e1c91c902ebd9a9edc778
SHA1

113e02dfe1f23a19dffe7bc9aec4479dcf1f25f9
SHA256

f66d2323c544ed41459f960785542d55e3efd7e3184e2cdec066386369456357
SHA512

83266f9832b01a90189b6c83a7ca318d120bb1f4c610d54d093e76fb96492a0fd99563c84c06f290b1a5ee907d3e9f950865b783ea14c9dcc53975ab3a78d38a
SSDEEP

6144:Mtm0GJyBL2QE+u6uraiqyugzFJ2HZhr2gIO6CdmRM98IMhjSLOSQIo/C/nU:MtmfSu6gzFJ2HbrylM98LjYQQ/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58e0c1baad9e1c91c902ebd9a9edc778

Files

58e0c1baad9e1c91c902ebd9a9edc778
.exe windows:4 windows x86 arch:x86

89c953b20568e1864f5f00881c2602fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_stricmp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_makepath
_wmakepath
wcscmp
wcscpy

kernel32

GetCurrentThreadId
LockResource
LoadResource
CompareStringA
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 215KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE