b07e5fc3ce8bf2b1e61151f2d2bacfc5454639ba7830eea762f1bce784567a2c_dump[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b07e5fc3ce8bf2b1e61151f2d2bacfc5454639ba7830eea762f1bce784567a2c_dump.exe
Size

538KB
MD5

dfad5f82e06a93ca08df880ee799b8f8
SHA1

6d0853db835bc3e5e5f662efac6dabc8489f606c
SHA256

402cf31b09d3d008ca90ec48fcd3d94819182528ba92c5b4e20aeafc957f8202
SHA512

1248f429c273ef3ce2fcfafbd610ca90127e00cf72b174441461c96e81a98302920be260a3168c1fd06908c2a457200c4a2fece0325f94ca6084cbdad7c7ab3f
SSDEEP

12288:OmFFXHTuXHTIXgKKcBKPdUNmV7zJ0Axk9X+ELo3XSmDfxcf:OmTeIXgRcBxK0AxWo3X5fxc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07e5fc3ce8bf2b1e61151f2d2bacfc5454639ba7830eea762f1bce784567a2c_dump.exe

Files

b07e5fc3ce8bf2b1e61151f2d2bacfc5454639ba7830eea762f1bce784567a2c_dump.exe
.exe windows:6 windows x86 arch:x86

31caab6c07bdd9ba8a35c1b9e5e79f14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
QueryPerformanceCounter
QueryPerformanceFrequency

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject

user32

GetDC
ReleaseDC

Sections

.text
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ