982de7e89ebc68549950590ff3375ba2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

982de7e89ebc68549950590ff3375ba2
Size

396KB
MD5

982de7e89ebc68549950590ff3375ba2
SHA1

32384a85351e93d1287a66626a81ae50c6c21add
SHA256

910b5d5345947f8b0c6f97900f15991cc88f078491c523d8ae01c3e2280b0159
SHA512

3879fcb203816c760415d13491a70462430087426e996726a6380b706cf0e3f0919c928442fa261f086a51a0ff7e5d6d0d1c5cad74d20edaa0945026e0c58c57
SSDEEP

6144:0QMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCD/:brBxsptlK8D2JPHcGHXWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
982de7e89ebc68549950590ff3375ba2

Files

982de7e89ebc68549950590ff3375ba2
.exe windows:4 windows x86 arch:x86

b8aebed9ae2d49aed12945300abecd3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
ResetEvent
GetComputerNameA
LocalFree
CloseHandle
CreateFileW
PulseEvent
GetCurrentDirectoryA
GetTickCount
lstrlenA
GlobalUnlock
LoadLibraryW
CreateThread
GetModuleHandleA
lstrcpyA
GetCommandLineW
UnmapViewOfFile
FindClose
HeapCreate
Sleep

user32

GetDlgItem
DrawEdge
CallWindowProcA
CreateIcon
FillRect
CreateWindowExA
GetCaretPos
SetFocus
DispatchMessageA
GetDC
DrawMenuBar
CheckRadioButton
IsWindow

cryptui

CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ