dec8d10ba997ee3d4593eacf24888d08 | Triage

Sharing

General

Target

dec8d10ba997ee3d4593eacf24888d08
Size

28KB
MD5

dec8d10ba997ee3d4593eacf24888d08
SHA1

ef2101086849ddfc36c20bd325d79f4d85f3422b
SHA256

650fa73dca8b6452f3f12de7c38dc207bcc47956fded483d450f3897d91a2410
SHA512

f503832c3afe5092b3a167fb77a8fa4e3ee806f2036fb25cebd9def40bd54c0dd1a07685e5d241eda89a2845bc852090b05c9a03a389f39c540bba115ddea1e4
SSDEEP

384:QFVepLnzd9YtHsRp+9XJLYGbpouzIM2lAtghQY8V+:QKLYjPbCuz47x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dec8d10ba997ee3d4593eacf24888d08

Files

dec8d10ba997ee3d4593eacf24888d08
.exe windows:4 windows x86 arch:x86

9aaa0135f5722fed6500b9fcc064c607

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GlobalUnlock
CreateMutexA
CreateFileW
GetExitCodeProcess
SetLastError
lstrlenW
HeapCreate
GetProcessHeap
GetCurrentThreadId
GetStdHandle
GetEnvironmentVariableA
lstrcpyA
GlobalFree
CloseHandle
GetModuleHandleA
ReleaseMutex
FindResourceW
TlsGetValue
UnmapViewOfFile

user32

SetFocus
DrawMenuBar
IsWindow
CheckRadioButton
CallWindowProcA
GetCaretPos
GetDC
DrawEdge
CreateMenu
GetDlgItem
FillRect
CreateWindowExA
DispatchMessageA

rsaenh

CPDeriveKey
CPGenKey
CPHashData
CPDecrypt
CPSignHash

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nlluozm
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE