d3513dabd28d47669ae740bf587135be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3513dabd28d47669ae740bf587135be
Size

54KB
MD5

d3513dabd28d47669ae740bf587135be
SHA1

b277852026d0806fcd7a8829f4be9e4c5c1576e3
SHA256

b939090e17bd934056984d6a60a8092de6b5bb0e0a44336899ede7ba9dea1304
SHA512

9eb1fee0bd2bd62a352f3348048227bb00c90ca7beaf71a265b9382c1c469700f1df6bb61a2a96153164dc7da6ffa3bfd33badaab08f310560942a28838ff1af
SSDEEP

1536:A5dzMhDEkg8gZSUEausTmZn1AMK5xydEPZyCkGwgY8YUwbqE:oxMhDEkKJd2S1xydwk8YUSP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3513dabd28d47669ae740bf587135be

Files

d3513dabd28d47669ae740bf587135be
.exe windows:4 windows x86 arch:x86

c8d2d9f672786803dcd611ea74090ebd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

__p__wpgmptr
_copysign
__p__tzname
_mbsnicmp
_dup
_getws
_inp

kernel32

GetCurrentProcessId
GetThreadLocale
CreateEventW
GetCommConfig
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE