d600bed0c1ca11cea5a8675cf8688590 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d600bed0c1ca11cea5a8675cf8688590
Size

176KB
MD5

d600bed0c1ca11cea5a8675cf8688590
SHA1

b39ed7a931e7528f9d9a013585756ee1cae44075
SHA256

529e8db20b169b8897097bb80eed69b548178e48ab2a4c115d60a949f130f059
SHA512

f113723bb427f0b7307ff4ef94fbfd34a5f52a8f4872be48e4952012b238335f67436810cc00558abf1d9146ca710c60126034eef4d7ddd0eff8c3cdfc36f884
SSDEEP

3072:FwKca2SnYwza7ijPUTRtZH2gx3kS5/W3:Fqi27iQNrhx0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d600bed0c1ca11cea5a8675cf8688590

Files

d600bed0c1ca11cea5a8675cf8688590
.exe windows:4 windows x86 arch:x86

33f55d4c51d56ea50bcba04b0055da08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerInstallFileA
GetFileVersionInfoSizeA

kernel32

ExitProcess
FormatMessageA
LoadLibraryA
LocalAlloc
VirtualAllocEx
FreeLibrary

gdi32

GetDIBColorTable
SetTextColor

user32

LoadCursorA
GetTopWindow
LoadIconA
SetWindowTextA
SetWindowsHookExA
GetMenu
ShowOwnedPopups
GetWindowDC

Exports

Exports

7S4AUkb

Sections

CODE
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Epdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ