d768a8b0cba98811aecdef46ac42d6f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d768a8b0cba98811aecdef46ac42d6f4
Size

68KB
MD5

d768a8b0cba98811aecdef46ac42d6f4
SHA1

406c11d86f9e677f92388b6c88ffbfdabeb4318e
SHA256

ec0751fa2fbfabed8a44080c59a482bf671a0c02cce94f464f2aa60a6e958de3
SHA512

b320ae20e7ea1a20bbda535cb505e7089e6ab9c83d127aacb22c780da129150d8311431908a42d9290f5308850291faaa2d03644540a0176e080f7a0d5d0c974
SSDEEP

1536:Qs4kDi9LU9LQ4BFJTF5alJHpe73SCKRwiUeN96wqvsr9LK9L3gkc:Ak+9A9pnhcdpMwRRhowt9O9bV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d768a8b0cba98811aecdef46ac42d6f4

Files

d768a8b0cba98811aecdef46ac42d6f4
.exe windows:4 windows x86 arch:x86

79dc42a0586ceb906b796023ec36aabe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCPInfo

user32

CopyImage
DrawTextW
GetDlgItem
GetDC

comctl32

CreateUpDownControl
DrawStatusText
ImageList_Draw
ImageList_GetIcon

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ