c667408e65431cbbd0a2823d5e729181 | Triage

Sharing

General

Target

c667408e65431cbbd0a2823d5e729181
Size

57KB
MD5

c667408e65431cbbd0a2823d5e729181
SHA1

6f2f01dab59a36d47d2449aa85349d8992d968d9
SHA256

eeb708d0ad39a99a810bd5ab4815d0c458a46a0950e644b5bff2a35d2e86474c
SHA512

e2f8319790e1464bf51ea5f3c511982b13d29a029d2cf4b4b317204405192a23d261abd6e59df6a154316e92faee5e7d014f74020b5aa2ae0691ef79aeb39b85
SSDEEP

1536:2IHZ++pnuoQ1UQ/LszJmxDSEWP/evb/oE:2IH8+ZuoKUQ/ozJquES/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c667408e65431cbbd0a2823d5e729181

Files

c667408e65431cbbd0a2823d5e729181
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE