678a1c11252bfee38788ca2232f648d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

678a1c11252bfee38788ca2232f648d6
Size

392KB
MD5

678a1c11252bfee38788ca2232f648d6
SHA1

a42f3285d6de8dd03ebdf6e41741b69df98bf38d
SHA256

9ec36fa142b33b96f6e86a1bfa5b4ab31d62f0364cc3af068021703ffd7761d6
SHA512

b3578e084ab2cac6ae8706f6718d0a7a312d4483809778e3f82b1ca7eff12cf37f94346c4d013e7bfc6355546eb53d2127cb717975a2665a6075992d69190a63
SSDEEP

12288:hd5sTH4JGqud/+GyVod/A0RIhKcGicLo:hd5SSBGyVITRIhKz1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
678a1c11252bfee38788ca2232f648d6

Files

678a1c11252bfee38788ca2232f648d6
.exe windows:4 windows x86 arch:x86

1add3b427afe3f3fca5b43ad5e37dacd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
FindVolumeClose
HeapCreate
LoadLibraryExW
LocalFree
UnmapViewOfFile
lstrlenA
CreateThread
GetModuleHandleA
GetTickCount
SetEvent
GetSystemTime
GetComputerNameA
SetLastError
GetCommandLineW
Sleep
CloseHandle
GetCurrentDirectoryA
LocalUnlock
CreateFileA

user32

GetDC
FillRect
CallWindowProcA
CreateWindowExA
DrawEdge
IsWindow
SetFocus
GetDlgItem
CheckRadioButton
GetComboBoxInfo
DispatchMessageA
GetKeyState
DrawMenuBar

cryptui

CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
CryptUIDlgCertMgr
LocalEnroll
WizardFree

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ