575d0fd18dc80ee2982566b42a7f9f94e4ad0da73f464d52c4f7eb5d6d11edb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

575d0fd18dc80ee2982566b42a7f9f94e4ad0da73f464d52c4f7eb5d6d11edb0
Size

900KB
MD5

01e22c4b609283603a6652fb353961ce
SHA1

a9b38060c53dfb7d6b28196a59f886889706f665
SHA256

575d0fd18dc80ee2982566b42a7f9f94e4ad0da73f464d52c4f7eb5d6d11edb0
SHA512

e4c256ca0e725d52c3fec6163689cd423eeacce81d281caf5578701fcb24f516406979e58ab5c5fc837c375e5acbd6879833c02c2234ac978e2f3369c81eac75
SSDEEP

24576:e4nponZrI4ycn+R3dM5u68voJE73XTtOajbrx6FcV:e4ponZ84ylRNM5fJJOzVfrm8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
575d0fd18dc80ee2982566b42a7f9f94e4ad0da73f464d52c4f7eb5d6d11edb0

Files

575d0fd18dc80ee2982566b42a7f9f94e4ad0da73f464d52c4f7eb5d6d11edb0
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE