65e403282104a7d631b8d606382e8e91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65e403282104a7d631b8d606382e8e91
Size

811KB
MD5

65e403282104a7d631b8d606382e8e91
SHA1

36311dc945d7f240858b5ab4dbeb8e6997aeed60
SHA256

20ceaff655906397138862f5b36f5dade6bbff8b5468fefa13ff8e2a3dc8e116
SHA512

5408c1960e471ebc112de20245cbdf121a367232b303d9078105f61b810a1eeed268d18b9db7c210d65ba8deac2de44256e9f1a55d28f03a7cbcdb185f69d4c1
SSDEEP

24576:gZyBxQtVZj6P8JFmj65uRrAh3xGkVuVHD:gg2/ZjU8JFmou63EkKHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65e403282104a7d631b8d606382e8e91

Files

65e403282104a7d631b8d606382e8e91
.exe windows:4 windows x86 arch:x86

0c9237c8ab86987d361b430a084288f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
TlsAlloc
CloseHandle
GetLastError
GlobalFree
GetTickCount
GetPrivateProfileIntA
MapViewOfFile
GetLocalTime
FindAtomW
GetFileAttributesW
FindClose
GetComputerNameA
lstrlenA
SetLastError
VirtualAlloc
GetModuleHandleW
ExitProcess
GetStdHandle
CreateFileA

user32

CallWindowProcA
CreateWindowExA
CloseWindow
DispatchMessageA
EndDialog
DrawStateA
GetClientRect
DestroyCaret
GetClassInfoA
GetMenu
GetCaretPos
FillRect
GetDlgItem

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

d3dim

D3DFree

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ