c650025fb57194cc70d68f7fecc595d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c650025fb57194cc70d68f7fecc595d0
Size

177KB
MD5

c650025fb57194cc70d68f7fecc595d0
SHA1

b61c54d9c85807f6e30dc1564e31d2e701cb9ca7
SHA256

dccfa4de20092697cc1e0ab5df000140ecdf962c82569052a88dc2fcf69e1560
SHA512

a5cb6e101e24747784bda16ca885ba8fe334025a3e9646fc09e1449116153fd7330844a6e45d07ab1e5f05e96e92ed10609a9b78a7d50af147f9276a9c87d530
SSDEEP

3072:JzaP2n890qMoLY1CxctqfkKCnHLLhQ0eH6lQ+URpvBjcN4AERnEb361lzEvBEF34:Jz1u9LUKc3tnHjaRLjcoQulzXF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c650025fb57194cc70d68f7fecc595d0

Files

c650025fb57194cc70d68f7fecc595d0
.exe windows:4 windows x86 arch:x86

5f2003fe3207d0e16c29d64871084bb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetWindowInfo
ValidateRgn
GetCapture
ValidateRect
InvalidateRgn
ReleaseCapture
ExcludeUpdateRgn
SetCapture
GetUpdateRgn

kernel32

FreeLibrary
FindFirstFileW
GetNextVDMCommand
GetShortPathNameW
SetThreadPriority
FindNextFileW
LoadResource
FindClose
FindResourceW
SetCurrentDirectoryW
EnumResourceNamesW
FileTimeToSystemTime
SetErrorMode
CompareStringA
GetLocalTime
RegisterWaitForSingleObject
FileTimeToLocalFileTime
GetStringTypeW
SetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
SearchPathW

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ