d6170c6e7a5cb13358cb4ce0899fe917 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6170c6e7a5cb13358cb4ce0899fe917
Size

10.4MB
MD5

d6170c6e7a5cb13358cb4ce0899fe917
SHA1

cf21c9fa814d38e536262d8fe6562746b71591b0
SHA256

f0733e5b7c21032fe46c01ccd928b753e6895d7348f0099c62c7389eb12f9e08
SHA512

a5ec6691a8e4008ad77fe2c01b7fb0354b30f564664bd5d76668723099af50fba36f4230f6e0c52bd73da478dabfa7fc6b9bb69fa260a630ee53fa6f14a33b31
SSDEEP

1536:3Z1g7uI/N6jE3Nljem0WGbfhI3aqFvJtbjWhSYqo4UO2CkouXE3HircccccccccY:7gRIjE3jjeJWQfKKq9o9qv3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6170c6e7a5cb13358cb4ce0899fe917

Files

d6170c6e7a5cb13358cb4ce0899fe917
.exe windows:5 windows x86 arch:x86

73408cbc01e9ca1bce3d5e458bd19652

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
GetACP
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA
GetCurrentDirectoryA
GetSystemTime
VirtualAllocEx
ExitThread
GetShortPathNameA
DecodePointer
RemoveDirectoryA
VirtualFreeEx
AllocConsole
ReadFile

shell32

DllRegisterServer
FindExecutableA
ShellMessageBoxW
ShellAboutW
SHQueryRecycleBinA
SHGetFileInfoA
SHGetFolderPathA
SHGetMalloc
SHGetDataFromIDListW
StrStrW
Shell_NotifyIconW
ShellExecuteW
StrRChrW
SHDefExtractIconA
DragQueryPoint

ctl3d32

Ctl3dGetVer
Ctl3dEnabled
Ctl3dCtlColor
Ctl3dRegister

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PDATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.odata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rel
Size: 10.4MB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ