d430893687154112a7c053c2f8000795 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d430893687154112a7c053c2f8000795
Size

57KB
MD5

d430893687154112a7c053c2f8000795
SHA1

1d5d56027a20b9b027d5efe7b9d28dcd5c86c009
SHA256

15d86f2b8c169ffe5017b93461fbe0a20b246ae3bc4f4109b7bfb2fcca18d1c1
SHA512

efc0a5c1124033b1d11717b4a47d5a7c51b1fe6fd2e8f189a20354a99f496515468b4a3f00ed51b70ad437dc14bf503d9044a89a68be77248f8e575212f13845
SSDEEP

1536:s+WhJY0czBodAIJvMYMTFAhwuJMbTD9s1fDh1+:sBuoCIJUbTFs1MbTDEft1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d430893687154112a7c053c2f8000795

Files

d430893687154112a7c053c2f8000795
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE