df32711904f0166fdc3ea8e23df275db

General

Target

df32711904f0166fdc3ea8e23df275db
Size

628KB
MD5

df32711904f0166fdc3ea8e23df275db
SHA1

c31e621f2b4c0056b55bb72d3f4402eee933ba0b
SHA256

c98ba8dc847d32bf55f3ff70760831cc9111bdf3bccc0530647c54dec718d5ce
SHA512

a0250df20fe9faa944905633420ec195ededa92df0810497fc96a3920ea6424397664997e74a28c58fb0151fc07a85109b967f6e282f242f7d45fc3a0433660e
SSDEEP

12288:Pm4SKaLpjEMXZi1eQGkG14AOAKUZkVBvkG:Pm4SKaLpjEMXZi1tY6AiVn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df32711904f0166fdc3ea8e23df275db

Files

df32711904f0166fdc3ea8e23df275db
.exe windows:4 windows

ee1cbc6d9eb58175e1a4311472388a72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
VerLanguageNameA
HeapCreate
VerLanguageNameW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
VirtualFree
RtlUnwind
WriteFile
LCMapStringW

ddraw

DirectDrawCreate
DirectDrawEnumerateW
DirectDrawEnumerateA
DirectDrawCreateClipper

version

VerQueryValueA
VerInstallFileA
VerFindFileA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
VerFindFileW
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerInstallFileW

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 536KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee1cbc6d9eb58175e1a4311472388a72

Headers

File Characteristics

Imports

kernel32

ddraw

version

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 536KB - Virtual size: 653KB

.rsrc Size: 48KB - Virtual size: 44KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 536KB - Virtual size: 653KB

.rsrc
Size: 48KB - Virtual size: 44KB