685c0fc5fdc7fe05d9ee6129f5c73186 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

685c0fc5fdc7fe05d9ee6129f5c73186
Size

393KB
MD5

685c0fc5fdc7fe05d9ee6129f5c73186
SHA1

a13665709b5178fdd3a41939521a634559883660
SHA256

083689042f92d1d149fc690e3d936fcb04e28fa0782e544788fd6bdde3aa05de
SHA512

b3ca3f90113f3ec3ba41bbc90bb31675a9777f3b349f01912ea96065562f36a0d6c57b2831b286fb899f160f2005f7ea901156408f688ddca21aaa6eb76777d0
SSDEEP

12288:h5kDag7dUmmLen1G6Lkjr7plWzuDRsVq6d:P4ag7dkenE6Qf7fpuhd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
685c0fc5fdc7fe05d9ee6129f5c73186

Files

685c0fc5fdc7fe05d9ee6129f5c73186
.exe windows:4 windows x86 arch:x86

ba98ddb68bc4ff8293d2effc54fb186f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetACP
LocalLock
CreateFileA
CreateFileMappingA
GetCalendarInfoA
WaitForMultipleObjects
GetConsoleAliasA
FreeEnvironmentStringsA
GetConsoleCP
HeapCreate
CloseHandle
FindClose
FindAtomA
TlsGetValue
GlobalUnlock
GetModuleHandleA
LocalFree
GetLastError
LoadLibraryExA

user32

DefWindowProcA
IsWindow
GetDlgItem
DrawEdge
DispatchMessageA
CheckRadioButton
GetDC
CascadeWindows
FillRect
GetIconInfo
DrawTextA
CallWindowProcA
SetFocus
MessageBoxA

setupapi

CM_Add_Range
SetupCloseInfFile
SetupCloseLog
CMP_Report_LogOn
CM_Add_IDA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ