b58ce4854a126af8046d0e18d20a3167 | Triage

Sharing

General

Target

b58ce4854a126af8046d0e18d20a3167
Size

97KB
MD5

b58ce4854a126af8046d0e18d20a3167
SHA1

c6730e0ec36d3d4a55abdc15d2a16570190b045d
SHA256

a28b57b22f8743d1361aa07552bed998865e2a830c441f0762462b85382bfab6
SHA512

e80b118a4163346058c30b21cdf7474be3dffcda675fb60f21444c30b91f307b6f6e256c0dbae7dfbf48ad725a92cd2e09dc6329adfb4536bc31a60c0bf5e246
SSDEEP

3072:MQFFeza/Yn1SIrFiwTQt3/6Zz/ZuKWDzAn:MQFFo1SI5iwTQt3/acKWD0n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b58ce4854a126af8046d0e18d20a3167

Files

b58ce4854a126af8046d0e18d20a3167
.exe windows:4 windows x86 arch:x86

e40074ed5ffd246de9e5e56a822162f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA

ntdll

RtlExtendedLargeIntegerDivide
PfxInitialize

user32

ReleaseDC

advapi32

QueryAllTracesA

gdi32

StrokePath
SetRectRgn
SetArcDirection
SaveDC
WidenPath
GetGraphicsMode
GetCurrentObject
FrameRgn
ExtSelectClipRgn
EqualRgn
DeleteDC
PatBlt
CancelDC
CreateCompatibleBitmap
CreateDIBPatternBrushPt
CreateDiscardableBitmap
CreateHatchBrush

rasapi32

RasGetConnectionStatistics

shlwapi

PathCommonPrefixW

dinput

DirectInputCreateA

Exports

Exports

MsUQLTPhgsfHfuxiRzrIoS
TVT8mxNUoL8wgv
VaybEvt8TL
bHcASzXX

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE