defae7f1dfe83eb6e3434aef85e890df | Triage

Sharing

General

Target

defae7f1dfe83eb6e3434aef85e890df
Size

415KB
MD5

defae7f1dfe83eb6e3434aef85e890df
SHA1

62d52ec624134fd490e9a89b16d3f8b0782ead84
SHA256

e72170cb5e060d3929d9f41ad023a3b36bb5fe47ca59c8cc11bf6a01e3780801
SHA512

e85397d2a5980f57df0aab79f10ffc7e23b649baa7ab7f57a3ce0bb51c70dc16e8d5ee026333c1243609a71025684810c6c593d3a0aa52b6d479fa8b674b3ecd
SSDEEP

6144:2H1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:2HKowTWTq4yzd/tS7U8tEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
defae7f1dfe83eb6e3434aef85e890df

Files

defae7f1dfe83eb6e3434aef85e890df
.exe windows:4 windows x86 arch:x86

5d3eff6f24fa1708132a03d2fb114a19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
RaiseException
GetFileAttributesA
GetSystemDirectoryA
GlobalFree
GetLogicalDrives
GetLastError
GetCommandLineA
GetACP
VirtualProtect
GlobalDeleteAtom
GetStdHandle
LockResource
SetErrorMode
HeapCreate
LoadLibraryExA
CloseHandle
Sleep
GlobalAddAtomA
GetLocaleInfoA
InterlockedExchange

user32

GetWindowTextA
ValidateRect
GetWindow
GetMenuItemInfoA
DrawTextA
wsprintfA
BeginPaint
GetClassNameA
ReleaseDC
SetForegroundWindow
ShowWindow
GetActiveWindow
GetParent
EndPaint
IsIconic
GetCursorPos
GetFocus
DrawEdge
FrameRect

httpapi

HttpAddUrl
HttpCreateHttpHandle
HttpTerminate
HttpInitialize
HttpRemoveUrl

wshtcpip

WSHNotify

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ