de733c163841df4209a697a075ed60b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de733c163841df4209a697a075ed60b6
Size

7KB
MD5

de733c163841df4209a697a075ed60b6
SHA1

1037476473f85ea153526d4726fa518de93d3af7
SHA256

4c9cde509bc6d46f619a416ab27430afb68376755d120c2f12c24b88cad3999c
SHA512

054c8a95ab5eb9d01209fcdc4fb66db916f243c2b1ea1c98f21b55acfafe41931350ed4329dc3686a77e9e908b5f9556c2a5991275ebc24643634cf36bbcbb35
SSDEEP

48:6jlFgsww0cxBXEPnPs2gj03NBJYC1sJ8bF1daOKsfDHJypQGsx1PuEBSpBv7xH:KV7wPXDuUsJ8D3KoDH0pQjXum6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de733c163841df4209a697a075ed60b6

Files

de733c163841df4209a697a075ed60b6
.exe windows:4 windows x86 arch:x86

65cdcf7f38a0fd181c6cb07d32d8f71e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontFamiliesExA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ