d6d645b00bde814fd35edb3c07d72a80 | Triage

Sharing

General

Target

d6d645b00bde814fd35edb3c07d72a80
Size

125KB
MD5

d6d645b00bde814fd35edb3c07d72a80
SHA1

764781724b5af6d9f14cf4d0463271ea05358ce8
SHA256

e6171ffbc8e0cd50e6136464a37763fd748502030b62519867e4f9e994a83bc4
SHA512

227b00b51f90f3f196676fd010c3801062e07b110fd2aeb182e32c0000242dd7672fd4e49242b998706ddec084c13ba66588bcea521f021096eeaf6fb0840a2f
SSDEEP

3072:EJgwBIxhn+dz7diTqkGqcZBUPs7dHNnu3lAzyDJkluJfBd8l:EuwWx8fScnUPey1BtB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6d645b00bde814fd35edb3c07d72a80

Files

d6d645b00bde814fd35edb3c07d72a80
.exe windows:4 windows x86 arch:x86

58310c0d0fdf9a017bcb0cb0e016ff1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
GetBitmapBits
CreateBitmap
CreateCompatibleBitmap
CopyEnhMetaFileA
GetPixel

user32

DrawEdge
DrawFrameControl
DispatchMessageW
GetCursor
GetMenu

ole32

GetHGlobalFromStream
MkParseDisplayName
CoCreateGuid
CoFreeUnusedLibraries
CoReleaseMarshalData
CoUninitialize
CreateOleAdviseHolder

kernel32

GetACP
lstrcatA
MoveFileA
LoadLibraryA
GetThreadLocale
VirtualAllocEx
HeapDestroy
GetCommandLineW
GetModuleHandleA

Exports

Exports

__4JHmH70_tzLR

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ