97577c1d0d8ba97a7a78a6a57af9be4f | Triage

Sharing

General

Target

97577c1d0d8ba97a7a78a6a57af9be4f
Size

747KB
MD5

97577c1d0d8ba97a7a78a6a57af9be4f
SHA1

8140c0018919ee578ddbf36179404f581a9168f3
SHA256

13a46af0ed7aebc30f1d96420e922c2ef04ec9044f8dc5db6119f3073ce884b6
SHA512

be9969a445f9ccc322fdae0824397c987fd277bcec789f7180a732f6fe6d9788cdea49707cc60bbd40766ba3df5a3a769b76ae86c3642fa15248758a9a03565f
SSDEEP

12288:fX6u5nlvwMAFzYZpRS9SUXnutA7/8NDC6wBpp+u7fogLj6K8YR5DAwPbQTLWXz60:fqu5lvtr89SftuMC6wBppjlpXR5DAkwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97577c1d0d8ba97a7a78a6a57af9be4f

Files

97577c1d0d8ba97a7a78a6a57af9be4f
.exe windows:5 windows x86 arch:x86

902b54373c60a4d18435b285e0cdd8ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
GetCommandLineA
HeapFree
GetDriveTypeA
GetTickCount
FindClose
FindVolumeClose
lstrlenA
CloseHandle
GetFileAttributesA
CreateSemaphoreA
ExitThread
GetModuleFileNameA
WaitForMultipleObjects
GetFileTime
GetFileType
LocalSize
HeapCreate
GetCurrentDirectoryW
GetModuleHandleA
FindVolumeClose
WriteFile
CreateDirectoryA
VirtualQuery
IsBadReadPtr

uxtheme

GetThemeTextMetrics
DrawThemeBackground
DrawThemeEdge
CloseThemeData
GetThemeTextExtent
GetWindowTheme
IsThemeActive
GetThemeColor
CloseThemeData
OpenThemeData
SetWindowTheme
GetThemeBool
GetThemeEnumValue

fltlib

FilterClose
FilterClose
FilterClose
FilterClose

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 740KB - Virtual size: 739KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE