abef1de6f5078d627e2ccc1a43a2575f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abef1de6f5078d627e2ccc1a43a2575f
Size

170KB
MD5

abef1de6f5078d627e2ccc1a43a2575f
SHA1

33e99169d891be65630decf9d072a3c36fa81e86
SHA256

1aaee7e5e1094672a78d814e95e66dfb6b63f82894ad4d13cc2325438f9abeb3
SHA512

50d2c00bf3d45fcfa97ca11aad0e6556c6a8499b57e7c65a805c97efb7d4a690e2b4618e1cae1feb15393836c4fe58af00dce2b33c021071bf094f60c3f04e3a
SSDEEP

3072:Q/ImDB2I7CGce0b36WB+vOLMJ68DmeiW+5jcU:QQQVOBe0b36W4vM8SXW+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abef1de6f5078d627e2ccc1a43a2575f

Files

abef1de6f5078d627e2ccc1a43a2575f
.exe windows:4 windows x86 arch:x86

3c8d5971b6166ad178e849cace83ff18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgCreateDocfile
StgOpenStorage

kernel32

LocalFree
GetLastError
GetShortPathNameW
DeleteCriticalSection
InitializeCriticalSection
GetProcessTimes
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
EnumResourceTypesA
GetCurrentProcessId
LoadLibraryA
ExitProcess
GetProcAddress
GetCurrentThreadId
CreateFileA
IsDebuggerPresent
CloseHandle
GetVersionExA

msvfw32

ICSendMessage
ICClose
ICOpen
ICDecompress

user32

wsprintfA
wsprintfW

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ