df3f028109aa84b97294ee91b2f6e16a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df3f028109aa84b97294ee91b2f6e16a
Size

76KB
MD5

df3f028109aa84b97294ee91b2f6e16a
SHA1

8ea01cc6e6e65c9efba40fe49d6796a873d36e7c
SHA256

6469f41e7e21008e5c4ced9096a5505ec9bf1948074cfd6595ee021f2b0fa532
SHA512

a1d25c8fbbfd1d2f0f9cc483e14f61c1145e1a01b69c971d9b7e22001e59ffff66ef680db84a2ebe8c6acd1b5a723c49071f58eaa309f709f44e8ce6d46f0928
SSDEEP

1536:6444NInGZNfpZDx3Epo0kkRYUgtP3jeRY3kDZwjEErxTWDTMqhGKYIZTET8x:onGZJf6ELU6Pf3vjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df3f028109aa84b97294ee91b2f6e16a

Files

df3f028109aa84b97294ee91b2f6e16a
.exe windows:4 windows x86 arch:x86

66bf0f6228284c9049cb9a0ee7598935

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
IsBadHugeReadPtr
GetVolumePathNameW
IsProcessorFeaturePresent
EnumTimeFormatsW
SetComputerNameW
MoveFileExA
EnumDateFormatsW
QueryWin31IniFilesMappedToRegistry
CompareFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE