980bf23870001882fdb33e29bc67ffdd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

980bf23870001882fdb33e29bc67ffdd
Size

278KB
MD5

980bf23870001882fdb33e29bc67ffdd
SHA1

dd875099a3921b8f69d02797bcd11d7eb2169a88
SHA256

00a47c378628911c7067cb89feb65783985fdbd312bc3bbf6e801831522f3054
SHA512

d7b987588d6912b1cba268bb271da9fd49f35f6942fa4a8d2ed91bc7cf67b10661686832b42a0425e1f15d8e9181d73329e33e1c59d1e5bfc6e664ccd5cc3a5a
SSDEEP

6144:hxMce6Zvldlv2AGKxdzbWPnmxctZawqrOb+Xn9k+y/mRFyukV:TMzOvldlvtGK3zbWPm2QrpX9JA8F7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
980bf23870001882fdb33e29bc67ffdd

Files

980bf23870001882fdb33e29bc67ffdd
.exe windows:4 windows x86 arch:x86

f828285ead0374fd983c454686e0f3b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleA
SetStdHandle
GetAtomNameW
VirtualAlloc
GetACP
TlsAlloc
HeapReAlloc
IsValidCodePage
HeapSize
GetLocaleInfoA
GetConsoleOutputCP
EnumResourceNamesA
MultiByteToWideChar
GetOEMCP
TlsGetValue
GetTimeFormatA
GetCPInfo
FindResourceA
SetFilePointer
TlsSetValue
GetDateFormatA
RtlUnwind
RaiseException

occache

FindControlClose

shell32

SHGetDataFromIDListW
SHGetPathFromIDListW
ShellExecuteW
DragAcceptFiles
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHAppBarMessage
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetFileInfoW
Shell_NotifyIconW

Sections

.text
Size: 145KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ