def22803b2e2a67bcf035740a96d3efc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

def22803b2e2a67bcf035740a96d3efc
Size

271KB
MD5

def22803b2e2a67bcf035740a96d3efc
SHA1

631055aff2194f75be823b58094088e8d4f2cb5b
SHA256

75f644ab3d1dd1f2b17d6c581fde7896fc30eeeb9587724d60bf655c62febdea
SHA512

b910b837f51a50c7da7bade9e1c7efc1da60adfb00e6f7e0f1c1ed923bdc3d0dac46de912c20a4b32f710d47e43b7724257a5d6be25725fa43a4749817bb0ac6
SSDEEP

6144:+Fk2jUdB2HeRTOFikLH8K80CpL7IJRppCdp4RM:Ck80IoO4kLHESwp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
def22803b2e2a67bcf035740a96d3efc

Files

def22803b2e2a67bcf035740a96d3efc
.exe windows:4 windows x86 arch:x86

1ae2fa89405eb679f2ed36710e38feb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetTickCount
FreeLibrary

user32

SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
PostMessageA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ