def4c936ba4f1ab0973bde8855414dc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

def4c936ba4f1ab0973bde8855414dc2
Size

37KB
MD5

def4c936ba4f1ab0973bde8855414dc2
SHA1

345ac7abacde9afde32fb6d14bb2690f52286907
SHA256

dcf1be3450ddeee767bda4cfadd49f3236cadddf5234c7437f2e2639f1600765
SHA512

fab2b635495b287ec8ccf892bd2425fb94f2c541c10b59b20a64389a62653244f8bffb4fe97b5b2a4f12821a44c91cfc993a91229de58b6f28b4ddf284cadba6
SSDEEP

768:bJISAP9zedR3q0CY3SF99D2x+31v/UZtKB5t:FBO9zwRyF99D2I9U/25t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
def4c936ba4f1ab0973bde8855414dc2

Files

def4c936ba4f1ab0973bde8855414dc2
.exe windows:4 windows x86 arch:x86

6f6c7d521ae7ce63f27b8cd132540ae8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

CheckSumMappedFile

kernel32

GetCurrentProcessId
VirtualFree
GetTempPathA
CloseHandle
WriteFile
CreateFileA
GetEnvironmentVariableA
VirtualAlloc
LoadLibraryA
GetVersion
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
Sleep
QueryPerformanceCounter
ReadFile
SetFilePointer
GetProcAddress
FreeLibrary
ExitProcess

advapi32

RegCreateKeyW
RegSetValueExA
RegDeleteKeyA
RegSetValueExW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 168B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ