b588641c1032bbfea2abeb0d88156423 | Triage

Sharing

General

Target

b588641c1032bbfea2abeb0d88156423
Size

233KB
MD5

b588641c1032bbfea2abeb0d88156423
SHA1

49cf30f80dc7b8eaf71c6596c3b91e83df9a1c75
SHA256

7c559632fd237276cf15142baadef00645bb48d141cf10a5d86273bfe2a5084a
SHA512

a2ad5609de79fa9d53e3feff43313570bba08fc0762a8920bcdc28c6949e2813976516f069712d6bab53cd90ce8de2e98f85b6c52f655ae01c0e3fd1988ed0ca
SSDEEP

6144:PJw6lzRJlujnFafB1u0gpWocsOJfBdcuuTjc5ALY3OiE:BnltJlujFafB13gpWohABd+TjcuLUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b588641c1032bbfea2abeb0d88156423

Files

b588641c1032bbfea2abeb0d88156423
.exe windows:5 windows x86 arch:x86

faf48148db614cc94fb90f2b3527ba83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetCurrentThread
GetProcAddress
GetCurrentProcessId
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetStdHandle
GetModuleHandleA
GetCommandLineA
InterlockedIncrement
GetStartupInfoA
TlsAlloc
GetModuleFileNameA
InterlockedDecrement

user32

GetDC

gdi32

ChoosePixelFormat
SetPixelFormat

opengl32

glLoadIdentity
glOrtho
wglCreateContext
glEnable
glBegin
glVertex2f
glEnd
wglDeleteContext
wglMakeCurrent

shell32

ord3

msvcrt

_XcptFilter
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_onexit
__setusermatherr
_initterm
__getmainargs
_acmdln
__dllonexit
_controlfp
memcpy
_exit
exit

Sections

.text
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ