967dff0f921a7608081d688c9064a1cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

967dff0f921a7608081d688c9064a1cd
Size

415KB
MD5

967dff0f921a7608081d688c9064a1cd
SHA1

d314c9410fdd29745f78b2cb7bfdcd1a71ef97c4
SHA256

e3cba550160968d8f86b6de418d22cda32abecb064dc55c53cf1d901c4e395ff
SHA512

56398fd0eee9331731e4356909f554002e00af5745064b542b503029a1e612e0f3e91857f1c80ac05ed2897d8e95ae27b1f33e3a15ffa049634cbcd3f372cbcf
SSDEEP

6144:++6b2I7dBJY+l8EAnddMJfnDnDYiktjAg2SDj2uqLUITtjtz:++6qIprYLsr0iktjrpDSFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
967dff0f921a7608081d688c9064a1cd

Files

967dff0f921a7608081d688c9064a1cd
.exe windows:4 windows x86 arch:x86

873c127ff890edca37f88e4f96f3c6c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
InterlockedExchange
EnterCriticalSection
GetLocaleInfoA
GlobalAddAtomA
GetLogicalDrives
HeapCreate
GetStdHandle
GlobalFree
GetCommandLineA
LockResource
VirtualProtect
GetSystemDirectoryA
GetLastError
GlobalAddAtomA
RaiseException
LoadLibraryExA
SetErrorMode
CloseHandle
GetFileAttributesExA
Sleep

user32

BeginPaint
EndPaint
GetWindow
FillRect
GetCursorPos
FrameRect
DrawTextA
IsIconic
ValidateRect
GetClassNameA
SetForegroundWindow
ReleaseDC
wsprintfA
FlashWindowEx
ShowWindow
GetWindowTextA
GetFocus
GetActiveWindow
GetParent

httpapi

HttpAddUrl
HttpAddFragmentToCache
HttpInitialize
HttpTerminate
HttpCreateHttpHandle

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ