d5dda02fc23ce608803d07b39d36eed7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5dda02fc23ce608803d07b39d36eed7
Size

93KB
MD5

d5dda02fc23ce608803d07b39d36eed7
SHA1

6320e6c7d7c2b8dba566389e003256e9a52fbc24
SHA256

0c6a33f50be6bdc8ed4dfe994194b9869ad5bd438ae6d0623b1c725b776c14cf
SHA512

fe5baedac9e32fe7c00df8b6fcfde9a6e08108c7553b9b11a435eed7437419102919f0380dfd290d27cc228f8ab5f46f8ecc0963c3c7e1f16f2538fb5c9bb359
SSDEEP

1536:CaPJ2AOdCb4fMX8hka+NDPcRzuiF68sAwTyJyeR11f2RfuEP24W:r7m7nkajRyX8JNBOx/2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5dda02fc23ce608803d07b39d36eed7

Files

d5dda02fc23ce608803d07b39d36eed7
.exe windows:5 windows x86 arch:x86

7b71dfd7386de00f824b78748df78439

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext

kernel32

GetSystemTime

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
DrawIcon
GetDlgItemTextA
GetForegroundWindow
GetIconInfo
GetKeyboardState
GetKeyState
GetWindowThreadProcessId
PeekMessageA
SendMessageA

Sections

.tyf
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rqfcf
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rap
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ