de7a4dd111649d1ddfb9982ea29500c3 | Triage

Sharing

General

Target

de7a4dd111649d1ddfb9982ea29500c3
Size

93KB
MD5

de7a4dd111649d1ddfb9982ea29500c3
SHA1

4c2fe6af94cd1416a97551e3ba04cbbec55d8eac
SHA256

9b2b3260595dc1b4659d853fb247e9c3fa3f3b1deb7083fe1813cbce93b1551c
SHA512

7c53db834b60e46b408f890445cd0b97f6bd8f76e9a3f7486bb60bf18d1e2164e2d4e2e6ef5567cb6d84b42e5a7ee4987d24b4d1aba25127f10822aecee7e46b
SSDEEP

1536:BHjkSMmc8y+Ad21K+HUtWU+POb1YVvjMItaOgHBmFx5R3E/XqMoTtD:xJc8ik1K+HUV5FMx5RU/6JR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

de7a4dd111649d1ddfb9982ea29500c3

Files

de7a4dd111649d1ddfb9982ea29500c3
.exe windows:5 windows x86 arch:x86

f51500bda0f82609e52c7245796c6eb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuItemCount
GetWindowLongA
DeleteMenu
GetCursorPos
GetMessageA
DispatchMessageA
CheckMenuItem
GetCursor
LoadIconA
LoadCursorA
RegisterClassExA
CreateMenu
PeekMessageA
DestroyMenu
BeginPaint
SetWindowTextA
CreateWindowExA
ShowWindow
UpdateWindow
TranslateMessage
EndPaint

gdi32

GetStockObject
GetROP2
CreateBitmap
Rectangle
DeleteObject

ole32

CreateBindCtx
CoInitialize
IIDFromString

lz32

LZInit

kernel32

GetLastError
GetLocalTime
LeaveCriticalSection
DeleteCriticalSection
GetSystemInfo
EnterCriticalSection
GetCPInfo
GlobalAlloc
LoadLibraryA
GlobalFree
FreeLibrary
InitializeCriticalSection
GetSystemTime
HeapAlloc
HeapCreate
GetModuleHandleA

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE