df31e40f19ad62746f2fa0a1b87857c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df31e40f19ad62746f2fa0a1b87857c9
Size

398KB
MD5

df31e40f19ad62746f2fa0a1b87857c9
SHA1

3d63dce26a59024ca9bc58a7fae1fe9b76aa1614
SHA256

eb7ec6943b97e86975ba704335cd164069b1ec4aaa37d131345514a1b6630004
SHA512

fdbf0af1d4d6b89ac943e4d5012f93e6f69a25a62ef8d642e79a3099dcacdbd234ec0891b735b11e430c26857536a678636b1e33b4c3f568dfd3c65e4e556a62
SSDEEP

6144:VgoFmLpqcNGUNwv3jNINCFtwoP+I88JlqvSb66NPGAAjr07ZNTdk:fFKtu1UX0lq6bPNPNAjQ7ZRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df31e40f19ad62746f2fa0a1b87857c9

Files

df31e40f19ad62746f2fa0a1b87857c9
.exe windows:5 windows x86 arch:x86

4058b755640407d72b28a3ed51bfe6a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetProcAddress
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
Sleep
DeleteFileW
GetModuleHandleW
GetLastError
LocalFree
LocalAlloc
ExitProcess
QueryPerformanceFrequency
RaiseException
GetTickCount
GetCurrentThreadId
DeleteCriticalSection
GetThreadLocale
InterlockedExchange
SetLastConsoleEventActive
GetVersionExW
InitializeCriticalSection
CopyFileW
GetLocaleInfoA

user32

ShowCursor
SetRectEmpty
DestroyIcon
GetTopWindow
GetParent
GetWindow
SetTimer
GetWindowRect
SetCapture
PostMessageW
KillTimer
GetFocus
TranslateMessage
LoadIconW
OffsetRect
LoadMenuW
EnableMenuItem
GetWindowPlacement
ReleaseCapture
IsWindowVisible
PtInRect

odbc32

SQLGetTypeInfoA

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ