c420ec3c91beec8fee465c4ba63ef676 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c420ec3c91beec8fee465c4ba63ef676
Size

16KB
MD5

c420ec3c91beec8fee465c4ba63ef676
SHA1

87bf0aaba332c944cac0de2145221abb80bbe679
SHA256

cb8d1ae9c7142aaa49cceae5856377b0faca90b8c4fd6090c97c994a35ec3530
SHA512

93f9808db471dc93bf0397361b2d09f78261acbaf3b579bf80b575ceeb3bdac31e01ec1a067ac4880adba67392dd163ecac09ff49a5f64692f64b62763daa4ed
SSDEEP

48:6FsZoE+NlkvDlBXSwoD/k8PZx4lx/0uTxWgKmoeMvamoz4IFBq7:a8oXNspBXODjZxyB0utWgKh33oz4QQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c420ec3c91beec8fee465c4ba63ef676

Files

c420ec3c91beec8fee465c4ba63ef676
.exe windows:4 windows x86 arch:x86

75425eba3977a336dc6c3f1c3bcbbf37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ