c993c17fa7a92cb0233e95a62187c15d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c993c17fa7a92cb0233e95a62187c15d
Size

56KB
MD5

c993c17fa7a92cb0233e95a62187c15d
SHA1

c7bb563dbd3ef50619e7e86e097c76f02baf664e
SHA256

b3f17cd54e7841334b02737b772110e2c238380ae98f154465ce95cc09ddd486
SHA512

83bf4a942ad6524bde1ffbc2718d94f9d713b73ac185246035345bb2f9ca438c40bb62013c9f31111077854e1aa2acc9d52509364b14709ad22c60e4af99f2c3
SSDEEP

768:lY0AubB2ktnvymj2DTbwf/P+57RXS0Ad/KPFfDzT90IkrsiurQEUQSN:l7Ausklvymj23bwf/P+5oq2I/iVwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c993c17fa7a92cb0233e95a62187c15d

Files

c993c17fa7a92cb0233e95a62187c15d
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE