c834312f9af9d3dba1a3aecd8bfd1cb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c834312f9af9d3dba1a3aecd8bfd1cb2
Size

240KB
MD5

c834312f9af9d3dba1a3aecd8bfd1cb2
SHA1

a0e9e7f8f47a636ed2e11b71801aeb4cb0346927
SHA256

ab1206773b13a2a31ecc080e37f52ef3649515c5934f865521cb4a17a47274e7
SHA512

c12aaf48b112b64f3ba5e4ca71b6fa4225c19fa15b2bb804d9004c7ef119ffa7aba0949fce0de9d906d04d1addca72a371f73ecd96c04a5518a7cb47a4fae590
SSDEEP

6144:ugwrkrl62qtcIvaaxfvuElwQaBAEOKEzetj3G4V:+elxUpvaa5uE6QcOtgj3G4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c834312f9af9d3dba1a3aecd8bfd1cb2

Files

c834312f9af9d3dba1a3aecd8bfd1cb2
.exe windows:4 windows x86 arch:x86

f25a52a1e9eda165f16a6b10c03f5070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
OpenFileMappingA
FormatMessageW
GlobalMemoryStatusEx
UnlockFileEx
WriteConsoleOutputW
EndUpdateResourceW
GetModuleFileNameA

user32

GetWindowLongW
GetClipCursor
TabbedTextOutW
LoadKeyboardLayoutA
CreateWindowStationW
CheckMenuItem
SetScrollPos

gdi32

SetGraphicsMode

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE