97feaf88462d47b7d9bdf1ff60411827 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97feaf88462d47b7d9bdf1ff60411827
Size

37KB
MD5

97feaf88462d47b7d9bdf1ff60411827
SHA1

a601cec6dc4f2935386c7791f967a3bfe66cfac2
SHA256

84b0681ddb7e7bc20ac483a2e5e4d3d08642cedef8010dcaf2a417a6d6f32b58
SHA512

22f486d50823c81c30da413f5b10a8e62bc1292dd51eeb0a70bda910c71e56fa187910fe05ac0756f80fac1b38f749ea5302ae01a5fb3ac2686294b24e8d96b4
SSDEEP

768:mzlGUaKp72vnzGnoWGnc6W59uJnox7QibLuFuEeJjxTtaM2i6cxvugNY:mJ9aDvKno1ZWnuRcLuFZ+XtHvu/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97feaf88462d47b7d9bdf1ff60411827

Files

97feaf88462d47b7d9bdf1ff60411827
.exe windows:4 windows x86 arch:x86

0ba9c0379f575e9f1d2c9b3685d7d91c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
VirtualProtect
GetConsoleAliasesLengthW
IsBadCodePtr
GetConsoleHardwareState
GetCommProperties
DuplicateHandle

user32

DdeReconnect
SetShellWindow
EnableWindow
SetFocus
DefDlgProcW

gdi32

EngStrokeAndFillPath
STROBJ_dwGetCodePage
DdEntry39
GdiGetDevmodeForPage
EngReleaseSemaphore

Sections

.text
Size: 1024B - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE