662cc9247464ebf9fd0bb2d8b3e3e339 | Triage

Sharing

General

Target

662cc9247464ebf9fd0bb2d8b3e3e339
Size

1.3MB
MD5

662cc9247464ebf9fd0bb2d8b3e3e339
SHA1

587c1c05b877fa247b58ee6758b81b34f188f1ed
SHA256

dd5e0bdf00d42f08ee523ea63931599197e6fe95bb5ddbcaff6991c0eb8fb744
SHA512

cabc89dc2a020757d07b2e19e7d7c775e13412d99569e3263dc98219c1bfa025c3e81aededbba7a6c7fd451668172e0ce07a66055e9376fd80bf96f937c958a1
SSDEEP

24576:FuiLFSlMCcG88M3bI468vgmnnCQqOkovZPQEp1lvtmE4v:FNLFVCpxM3lb6WzQk14v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
662cc9247464ebf9fd0bb2d8b3e3e339

Files

662cc9247464ebf9fd0bb2d8b3e3e339
.exe windows:5 windows x86 arch:x86

ac14ca3de1c7b9225dd578888cefb832

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
FindAtomA
GetLastError
AddAtomA
SleepEx
LoadLibraryA
GetProcAddress
Sleep
ExitProcess
GetModuleHandleA
GetTickCount

user32

SetMenu
GetMenu
GetDC
SendMessageA
PostQuitMessage
wsprintfA
RegisterClassA
CreateWindowExA

gdi32

SetDCBrushColor

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ