58e3dd8f53e5d552d6660961acccfdb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58e3dd8f53e5d552d6660961acccfdb3
Size

74KB
MD5

58e3dd8f53e5d552d6660961acccfdb3
SHA1

a331672ec7a3877ca6a4658b46d745d668233a77
SHA256

750c6a261a2833161362337aa1b71f2d7c238cc798a1a6c8930f54cdd145d07a
SHA512

db271c2aeca9d263d91258b48c6e64135fc1820513306b2dd426766ff79a66e7554cc6526d0fcc0377d36ba5ac07d8774a9aa13afed23cbe7730ddef5fd6f0ea
SSDEEP

1536:6UQODzZ74iMufrSZmOLWR1JAcpKR+DHdMbvS+olhhd+w:MO5Uyepo+eVwSfvd5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58e3dd8f53e5d552d6660961acccfdb3

Files

58e3dd8f53e5d552d6660961acccfdb3
.exe windows:4 windows x86 arch:x86

786c270f9bf875c3346c75a1ea619a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

_copysign
__p__tzname
__p__wpgmptr
_mbsnicmp
_dup
_getws
_inp

kernel32

CreateEventW
GetCommConfig
GetCurrentProcessId
GetThreadLocale
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE