d666d26cd1b61e1f7d56def2d346bd71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d666d26cd1b61e1f7d56def2d346bd71
Size

450KB
MD5

d666d26cd1b61e1f7d56def2d346bd71
SHA1

7eb6a6b347bfb936068f4782294c57c2e3ebc7dc
SHA256

44e525660e278358ac3a18612bddb9893b632ba15ff1c66f67f941c6d4ff0443
SHA512

e32d65df8186c2ffe285c3eb26b8f9d4a83cdbede9d920974861e00900376d4c0da0a805105fce26d43c371f59c043705bde3c6d8e1539cdf28705aa41fb12c3
SSDEEP

12288:dAQfo/OaCFuvGFQc9WKnDzy6wRr3SrnasISao:dAko2puvGWc9WKnDO/S/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d666d26cd1b61e1f7d56def2d346bd71

Files

d666d26cd1b61e1f7d56def2d346bd71
.exe windows:4 windows x86 arch:x86

7ea8fe3f6c18c1f1e71078d914e3e4c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
SuspendThread
HeapDestroy
CloseHandle
CreateSemaphoreW
GetModuleHandleA
GetVersion
FindClose
SetEvent
WriteConsoleA
ExitProcess
HeapCreate
GetCommandLineW
GetStartupInfoA
FindResourceExA
lstrlenW
GetEnvironmentVariableW
DeleteFileA
CloseHandle
ReleaseMutex

user32

GetSysColor
DispatchMessageA
CallWindowProcW
CreateIcon
FindWindowA
GetClassInfoA
DispatchMessageA
GetWindowLongA
GetKeyState
SetFocus
DrawTextW
PeekMessageA
IsZoomed

docprop

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ