de98d2fe3365d7ae02978339eeafc02f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de98d2fe3365d7ae02978339eeafc02f
Size

332KB
MD5

de98d2fe3365d7ae02978339eeafc02f
SHA1

101d183eee4121ded74feef9e3a5c335f9416dee
SHA256

607a8471acee45f9caf42fbe81f0c1fb176a16872d963dfe01f4f1dbe363f1e2
SHA512

5302efaa8e5f09b5d5e02c179a88642db6c899fb18c44e7019571aa3d7aa3d5bbf787999dd23682f1e0358dd7d9aa5768215cbabb8c35cb1b8217af7681e6115
SSDEEP

6144:2QMBL1mXDin/MqgTrLf7IL9pKpVQTvS0RhS/Xa6e2Ah2vrn:XMLmX2/MLnjYIqvS+hAKp2AMvz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de98d2fe3365d7ae02978339eeafc02f

Files

de98d2fe3365d7ae02978339eeafc02f
.exe windows:4 windows x86 arch:x86

cd632e8bfc75f381bf691de7ceb9eb44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetModuleHandleW
GetFileType
TerminateProcess
GetStringTypeA
GlobalFree
GetStartupInfoA
QueryPerformanceCounter
LocalReAlloc
IsBadWritePtr
InterlockedIncrement
GlobalHandle
GetExitCodeProcess
GetThreadLocale
HeapCreate
GetSystemTimeAsFileTime
GetLocaleInfoA
HeapSize
SizeofResource
TlsAlloc
ExitProcess

oleaut32

DispGetIDsOfNames
CreateErrorInfo
OleCreateFontIndirect
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW

msimg32

TransparentBlt

Sections

.text
Size: 217KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE