d53f06c666f1f7ba04362e33372a322c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d53f06c666f1f7ba04362e33372a322c
Size

20KB
MD5

d53f06c666f1f7ba04362e33372a322c
SHA1

a011bf86ce3564db4111c0b3c7b382cdcf63d619
SHA256

ca83bbc7c9e7373b87d88b375156749501797ff9b5c7c60e2cbf421d460ecbf4
SHA512

358b322da30f5ed78ccf4ea7a6cb6c09cf4fe693af2514b24787929f913a5ca22900aed738f7c616e4357d8c56a1a98a442fc03bc97839316fbe2c3415febc40
SSDEEP

384:cDfhtgK3bNbkKrX7jNh1qq3tHOjzxobu+ZRzRkzXoDtoyQ6:MDgK3bNoKrLjNfqOE9au+LRkzopoN6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d53f06c666f1f7ba04362e33372a322c

Files

d53f06c666f1f7ba04362e33372a322c
.exe windows:4 windows x86 arch:x86

fd8cd65b1dee90fec9c9d8c314d9be26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetVersionExA
CloseHandle
GetProcAddress
LoadLibraryA
CopyFileA
GetModuleFileNameA
FreeLibrary
SetFileAttributesA
ReadFile
SetFilePointer
GetStartupInfoA
GetModuleHandleA
GetTickCount
ExitProcess

user32

CreateWindowExA
RegisterClassA
DefWindowProcA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA

gdi32

GetStockObject

msvcrt

_initterm
_wcsicmp
_controlfp
_except_handler3
sprintf
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_stricmp
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE