8db253b379c00ca5263216d52e4989e2 | Triage

Sharing

General

Target

8db253b379c00ca5263216d52e4989e2
Size

136KB
MD5

8db253b379c00ca5263216d52e4989e2
SHA1

f5a897233805c2eee3353f1211776c44f78bf92f
SHA256

5d758666b56fe61e21554b7227758fffdf90f58b426218d8dd45e6f9854d5ca8
SHA512

c07926e7e0a732625b04ee9df4dda0dabbe60a8e88a0d7525c4385b61b111626471ee34c764178a1e3a086f6bb23d579fe09a4bc588792e4c74d7257eef0d42d
SSDEEP

3072:uGJRm7s5fj1Bf3vH1U8zIQzjadfCuLeLpmpYu:n40BFvm8zHv0Mu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8db253b379c00ca5263216d52e4989e2

Files

8db253b379c00ca5263216d52e4989e2
.exe windows:4 windows x86 arch:x86

2ef5944541e87488e8c4437d51361aa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
TlsGetValue
GlobalUnlock
GetACP
CreateFileA
LoadLibraryW
FindResourceA
GetModuleHandleA
LocalFree
TerminateThread
CreateMutexA
GetEnvironmentVariableA
FindClose
HeapCreate
lstrlen
IsBadStringPtrW
PulseEvent
Sleep
SetLastError
CloseHandle

user32

GetDlgItem
SetFocus
CopyRect
DefWindowProcW
CheckRadioButton
IsWindow
CallWindowProcA
FillRect
DrawEdge
DispatchMessageA
GetIconInfo
DrawMenuBar
GetDC

msasn1

ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE