d72bbf286c11312332ab4c1adf6eb3a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d72bbf286c11312332ab4c1adf6eb3a2
Size

112KB
MD5

d72bbf286c11312332ab4c1adf6eb3a2
SHA1

dcbc4f00b561a0dd0bf9537ea6440cefc00d1be5
SHA256

60c7b81601ce4f9fb4bd239d272d1c37e6c9b3e99d56c878440f1ce12840e789
SHA512

31846af5dc6075eb87488cc7d2fbba6a40b02358b08dd145e24539159d7735c5b83965888c8f7985c03b138703cde5b44cc0b6bcdaeacf091d293b3d5704caed
SSDEEP

1536:tGjJ2DwzWwPkPKtgrLMCtpnozpjGlg5/N45pRCggYMQ3TzjdiXfD3JJF4:IID0uKW3tpYSg5q53CVsTd6D3Jv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d72bbf286c11312332ab4c1adf6eb3a2

Files

d72bbf286c11312332ab4c1adf6eb3a2
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

59819eabd201b20a86b008b5e12210cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetUserDefaultLangID
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

feeqnuz
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE