d657e04a2a54fce623d6b030ef6ad4bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d657e04a2a54fce623d6b030ef6ad4bb
Size

28KB
MD5

d657e04a2a54fce623d6b030ef6ad4bb
SHA1

49ff4e52b9f7e1cd715546a22f930fbb73aeac8c
SHA256

9b2599b100c541098c9f9b66b72253265996fe4e361b669c3fe7a1899720f092
SHA512

98a57c81594fb3abfd1136bcf6aab96db4703bf93018600af46a9c822e5f71f5cdbbdd3a894439c97ed2a8f03d5bc0a451000fc12b84a6fe528e84debb032735
SSDEEP

384:ODZm1yJENs6UudQ6rlT738rxRdZ+PuoppFiEvJSPvGGtnHj7BR294bNUKxr9TV1:MZtGNFUKBTrMG2oDIuCuGt5YkS2NV1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d657e04a2a54fce623d6b030ef6ad4bb

Files

d657e04a2a54fce623d6b030ef6ad4bb
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE