659d32d07cc3ec3c373206a4661df65a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659d32d07cc3ec3c373206a4661df65a
Size

396KB
MD5

659d32d07cc3ec3c373206a4661df65a
SHA1

713d50a9aa957f7cfe5cd10dca09c8618c68b7e6
SHA256

a216b6f8e1b76f2488f847eda293785abf620a456d03391f2aa15d570df77151
SHA512

ec2227cd73ca3dcc2ef761f29c8c4d5cb2b35b23c351f83df36ffe7cb8d8c91d077a4e11fc3f98cbbbd3d1ba3cd34e84363e8da6bc6168b09a7463a4744212c7
SSDEEP

6144:sQMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCD7:DrBxsptlK8D2JPHcGHXWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659d32d07cc3ec3c373206a4661df65a

Files

659d32d07cc3ec3c373206a4661df65a
.exe windows:4 windows x86 arch:x86

b8aebed9ae2d49aed12945300abecd3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
ResetEvent
GetComputerNameA
LocalFree
CloseHandle
CreateFileW
PulseEvent
GetCurrentDirectoryA
GetTickCount
lstrlenA
GlobalUnlock
LoadLibraryW
CreateThread
GetModuleHandleA
lstrcpyA
GetCommandLineW
UnmapViewOfFile
FindClose
HeapCreate
Sleep

user32

GetDlgItem
DrawEdge
CallWindowProcA
CreateIcon
FillRect
CreateWindowExA
GetCaretPos
SetFocus
DispatchMessageA
GetDC
DrawMenuBar
CheckRadioButton
IsWindow

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ