dfef0722a663529109ca674aff28c33c74041d1a4b7e9152bc5cb5a9a76e7cea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfef0722a663529109ca674aff28c33c74041d1a4b7e9152bc5cb5a9a76e7cea
Size

77KB
MD5

d0ff473c2cec64548edad3b9ca68ac57
SHA1

a825aaf8986261add83e08c877805a7ab606f52c
SHA256

dfef0722a663529109ca674aff28c33c74041d1a4b7e9152bc5cb5a9a76e7cea
SHA512

d02981cb4481ce9d7e309ed8b267951ef5de9039b57c7d5cfd115c67d25ecde1bb294b1e2dd2787e57d86efbafe768bad84e0657ce21d8977200ea9e4d2805e3
SSDEEP

768:JWDnMge+QDKVZhPsED3VK2+ZtyOjgO4r9vFAg2rqVcBf55vVWL9CUk+/wcWTQFBp:w/e+mKFYTjipvF26cZ0L4P+4qf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfef0722a663529109ca674aff28c33c74041d1a4b7e9152bc5cb5a9a76e7cea

Files

dfef0722a663529109ca674aff28c33c74041d1a4b7e9152bc5cb5a9a76e7cea
.exe windows:5 windows x86 arch:x86

28e46cf78fd543ccdc5071ec4c6c58bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

gdi32

GetWindowOrgEx
SetWindowOrgEx
CreateDCA

kernel32

ExitProcess
GetModuleHandleW
GetConsoleCP
SetConsoleMode
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ