74df286d326281bed7c170cf6cec1666 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74df286d326281bed7c170cf6cec1666
Size

355KB
MD5

74df286d326281bed7c170cf6cec1666
SHA1

09909a35b635aa6ce4f8cb73aaa2408a81def588
SHA256

f964210ab75daebeae2df9a3243977bd7d4bd8bf309fc7844d736c1b72d0932c
SHA512

56f6f6d4bc2e6ba5df0e6a73c94ca5169194575210f18118d6d824d643feee521d8369fbef2f02e77015461f21b83c2d534b07c72572e6b69c9c222b74b49387
SSDEEP

6144:/Ro4c+AnxPURnEbremqbTbKq2Was0OVM9s84O4EZZqZzvlcK:S+ARURkwbTbj5a9J9dV4Uq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74df286d326281bed7c170cf6cec1666

Files

74df286d326281bed7c170cf6cec1666
.exe windows:4 windows x86 arch:x86

37af3ec161d07a3f42e74e8d7b911eb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
LockResource
LoadResource
GetLocaleInfoA
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatNumber
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 243KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE