c153d4b31877561f828aec70d1531bc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c153d4b31877561f828aec70d1531bc9
Size

385KB
MD5

c153d4b31877561f828aec70d1531bc9
SHA1

d9d3287efb49b9b6a1e5c090ab502ad776b23e65
SHA256

57c9d33c813ac3c4bbe2cb107787e563ab58bf0176619606c15dda01b26553a9
SHA512

727365ee86892331d8b785291ed6587eec4fcff4d685ec914744cde654519e57f17bc308db739247bcfbfa4745a8c2662a07769a42e9ac01e27a87ad15d14fe3
SSDEEP

6144:dRw3PcpCG0fJMHneMCDB6sEFu6XwydbyY9gHDtWGDSYAnLCI:daU4G0fchCd+RXwycY9gkGTALb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c153d4b31877561f828aec70d1531bc9

Files

c153d4b31877561f828aec70d1531bc9
.exe windows:4 windows x86 arch:x86

1476e7fdf88e40a0bae505e9ea6cf869

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ResumeThread
FindVolumeClose
CloseHandle
FreeConsole
GetModuleHandleW
ResetEvent
GlobalFree
GetDriveTypeW
GetPrivateProfileIntW
GetMailslotInfo
GetACP
LocalFree
GetEnvironmentVariableA
LocalSize
VirtualAlloc
WriteFile
CreateThread
GetExitCodeProcess
InterlockedExchange

user32

GetKeyboardType
DispatchMessageA
EndDialog
GetClassInfoA
SetFocus
CallWindowProcW
GetSysColor
IsWindow
GetCursorInfo
GetClientRect
DrawStateW
GetSysColor
CreateWindowExA

qedit

DllUnregisterServer
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
DllUnregisterServer

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ