c58a56d9e8fca8067bb57dccdca6bbfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c58a56d9e8fca8067bb57dccdca6bbfb
Size

190KB
MD5

c58a56d9e8fca8067bb57dccdca6bbfb
SHA1

d7f1d7880dfb41a5ea0c7715701c878d2b7b9b3b
SHA256

d34f81b2748b4f2064676faa08ce234e181f1ad2e24e6c75c32d2da81c5683d5
SHA512

165c781520c905f92d6728f5dd687e68fe3193bb397d4aeb51c37e7473b2ba911d36a7d6798fbf5f176233b02d2a2db5477b9bc78576834ff22e85abfd6cc586
SSDEEP

3072:OS71UZ4XjkJRGHOjZ9merIS+yMnLVlPhW9364shCUe+MwooERymg3:OS2HPmerIv/TU9jshk5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c58a56d9e8fca8067bb57dccdca6bbfb

Files

c58a56d9e8fca8067bb57dccdca6bbfb
.exe windows:4 windows x86 arch:x86

8afd26f624c97936c13d9a2f2368b057

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClipCursor
DestroyMenu
InvalidateRect
SetParent
SetCursor
IsWindow
EnableWindow
GetFocus
CreatePopupMenu
SetWindowPos
GetDesktopWindow
RedrawWindow
LoadCursorW
TrackPopupMenuEx
PtInRect

msvfw32

ICOpen
ICSendMessage
ICClose
ICDecompress

kernel32

GetShortPathNameW
CloseHandle
GetCurrentProcessId
GetModuleHandleW
GetHandleInformation
UnhandledExceptionFilter
EnumResourceTypesW
LoadLibraryW
CreateFileW
ExitProcess
GetProcAddress
GlobalFree
GetLastError
GetCurrentThreadId
GetVersionExW

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ