d568f0d918cf4aa4c5589ef07836792b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d568f0d918cf4aa4c5589ef07836792b
Size

58KB
MD5

d568f0d918cf4aa4c5589ef07836792b
SHA1

2427a63fcb9e0dba97e226b7342ed70cbe735c1d
SHA256

220224f825a886af0b25dac4d3add83c6665d0552af3fde41472264cc2ab8f7a
SHA512

7bb95b24766dea9932191dedea670eca0c4169e2f05fc0af0cfd3a62ce800d09e19dd7300bc3494479e47c1fef3dfc0b315ef9c0511ae724bb61957111c57d43
SSDEEP

1536:8INYdlPGvWZwYT/AXf0vYq3niDSkiNVJWLe5EC:8INYdwvWZHT/APCYyvNVrE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d568f0d918cf4aa4c5589ef07836792b

Files

d568f0d918cf4aa4c5589ef07836792b
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE