adf632fb206ecf4380bffd54603868fd | Triage

Sharing

General

Target

adf632fb206ecf4380bffd54603868fd
Size

77KB
MD5

adf632fb206ecf4380bffd54603868fd
SHA1

680b3de33ee79603ffa765c1f32e25cf41f6c73b
SHA256

cff2affa7b3adc5c939250848585ea76feed1f60da63afec7ec8c84888c8e8eb
SHA512

b3579519bcc34d2a25203f5cb1f52cea870b49efdc31e4a56b6b8f0f5d14a0cdb416558a5d956417c0b77fbc3a0a45418e6a1943eb1ff8d3a86fcc9a40d5ff4a
SSDEEP

1536:4fVD4b8KpD8Il3UlAL7MDkEUBCaN+yA3c7FhCqePrP0KhF4YyWjTa:4p4okD8O3UmUD4CaNZAs7Fh4rP0Khxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf632fb206ecf4380bffd54603868fd

Files

adf632fb206ecf4380bffd54603868fd
.exe windows:4 windows x86 arch:x86

15f52aab428a3e4429388533cde5ae74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
OpenFileMappingA
VirtualProtectEx
ExitProcess

user32

CharUpperA
CheckMenuItem
EmptyClipboard
DeferWindowPos

Exports

Exports

Ukcmsmiix
Chpnsvxr

Sections

.itext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lmi2l1
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lmi1l1
Size: 69KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ