df3988a32942586b512f4e981c993611 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df3988a32942586b512f4e981c993611
Size

71KB
MD5

df3988a32942586b512f4e981c993611
SHA1

215953e42a8dad592597a7a6d498d7c95f34a4be
SHA256

0e55027506ec2901994c0998889e2b6f96814649eb2fe1d1cdf22b197136d9c9
SHA512

4d65ef18f96907e4a5a6200a5f19d0a841b46f412fdc1f50f5cf63243c9f770955d048b1fe228e7674b3626de02af9d5e4fdd7f3a9be18006f347659fabb3c9b
SSDEEP

1536:YWHD6PMe005oNd+6BoNuH9OjdTpPDRAvTDG:GMkgUuHGdVP9AvTC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df3988a32942586b512f4e981c993611

Files

df3988a32942586b512f4e981c993611
.exe windows:4 windows x86 arch:x86

f1e2ddf0f7455a11f83f3b90063e7990

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetExpandedNameA
FlushFileBuffers
GetCurrentThread
WriteConsoleA
GetCurrentProcess
GetTimeFormatA
GetModuleHandleA
DeleteAtom
HeapDestroy
GetThreadPriority
VirtualProtect
GetACP
IsDebuggerPresent
GetEnvironmentStringsA
GetCurrentProcessId
FormatMessageA
OpenSemaphoreA
GetStdHandle
HeapCreate
InterlockedExchange

user32

EndPaint
SetForegroundWindow
IsIconic
wsprintfA
DrawTextA
BeginPaint
FillRect
ValidateRgn
GetWindowTextLengthA
SetActiveWindow
ShowWindow
GetFocus
GetCursorPos
GetParent
GetClassNameA
GetDlgItem
ReleaseDC
FrameRect
GetWindow

advapi32

RegEnumKeyA
RegCloseKey
RegQueryInfoKeyA
RegFlushKey
RegCreateKeyA

uxtheme

GetThemeSysFont

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ