d3c134feb2d4153d18b742e494f28dba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3c134feb2d4153d18b742e494f28dba
Size

27KB
MD5

d3c134feb2d4153d18b742e494f28dba
SHA1

220e904b84bfac6b6621949cae0f79df1343d013
SHA256

11daa7fa54a138929ff29cd51c0bf398bded499b0e13faadace6fe9861a31558
SHA512

e3dc8e8f1907857d35e4ff69e530d38cf6f51216212a126fd0b66c793308baf6476fc005b43787e2da780db36b2853be0108d01a88a92ec14116227ce8f88710
SSDEEP

384:MfotnQzS4c5YAJXkNeIlA8iad6EaHbPGbgSo3grvMXZ72G2keGOn:MfotQBc5YTNeIqad6EaHzvS8go2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3c134feb2d4153d18b742e494f28dba

Files

d3c134feb2d4153d18b742e494f28dba
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE