deb5d92552e5f468bdd0e5a5810f2483 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

deb5d92552e5f468bdd0e5a5810f2483
Size

8KB
MD5

deb5d92552e5f468bdd0e5a5810f2483
SHA1

4f86f05ab1e490c2f3f7e6aad8ac3f22d7a9b564
SHA256

ef1081ea7bfc34a30c860488a46f679da6e91766b54358b3278ddf4c4d40f1b2
SHA512

8006151648a356bcf75d8e2072bfcd09d7b048880f107fd6cd62aaf1c7021e4480a04298fde2fc5612a772cacebf10106c2e0c48c57dd5d7138f4c76c14f7cd3
SSDEEP

192:UAJJjkQwC8Q/r3T5rUlOdphqwDsiHynze0x/fpAboUHewu:UA7CC8Q/nClOdpIy/d0xXpAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deb5d92552e5f468bdd0e5a5810f2483

Files

deb5d92552e5f468bdd0e5a5810f2483
.exe windows:1 windows x86 arch:x86

ca6c5b9c53eda59d8c37a6ac186fc542

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateMappedBitmap
ImageList_Duplicate
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetImageRect

user32

CloseWindow
CopyIcon
CopyImage
CreateCaret

gdi32

ExtCreateRegion
ExtFloodFill
FrameRgn
GdiGetDC

kernel32

GetCurrentThread
GetFileSize
GetLocaleInfoA
GetOEMCP
GetProcessAffinityMask
GetProfileSectionA

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE