d5cc9ccdeaf72a056ca87a9254f33e67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5cc9ccdeaf72a056ca87a9254f33e67
Size

809KB
MD5

d5cc9ccdeaf72a056ca87a9254f33e67
SHA1

8c767e1ca77229f0f9db9c6988958c0c3ae8271f
SHA256

28cd1514f0e79d420da6babe6293e9130640de348e66689a0de61081da600f1c
SHA512

038d72b2d3771b3b101d81fa8831aa2f3314a09c9b5ee81f2f38b5ff2b628b0f83e31fb8da5112984d04e19be41b74ae26a8ba66805b28ea59012f8fe8460acc
SSDEEP

24576:ZoRmNmqsDheXG+1Quez+DNJLuUWlYK6bL:26mqsDhefsW0/6bL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5cc9ccdeaf72a056ca87a9254f33e67

Files

d5cc9ccdeaf72a056ca87a9254f33e67
.exe windows:4 windows x86 arch:x86

4f7a316ce42833bf529f17a88fa3bd46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetDriveTypeA
ExitThread
CreateFileW
GetComputerNameW
GetLocalTime
ReleaseMutex
GetModuleHandleW
GetExitCodeProcess
GlobalFree
CloseHandle
lstrlenA
GetProcessHeap
FindVolumeClose
LocalFree
GetPrivateProfileIntW
GlobalSize
FreeConsole
VirtualAlloc
SetEvent

user32

GetClassInfoA
CreateWindowExA
GetKeyState
GetDlgItem
DrawStateW
GetSysColor
SetFocus
CallWindowProcA
GetCursorInfo
GetClientRect
DispatchMessageA
GetMenu
EndDialog

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

ntshrui

IsPathSharedA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ