df4ab98dd5db166505124f7fcd19dd17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df4ab98dd5db166505124f7fcd19dd17
Size

19KB
MD5

df4ab98dd5db166505124f7fcd19dd17
SHA1

262fe06bdf55a13d8b6d07aea80faadcb7615584
SHA256

f01754ced0290c5324a629486ff6f64a2812d762cd423bec11206f279eab7edf
SHA512

45dbf8398e66eea7143e11af6bf896e1507c68fbd5f0a8f58bf89827a22f8e05206c19d9f99971dbddf3bf242cd8a84d0a450019e912de0a51fc92926ab68f47
SSDEEP

192:rnCLWEST6h2HlbQQcajcBt9U0SSxkFfR4KwrH5OYnlf3s+qO2d/pQ6X7:rnCWEPh2HlbT5jcBkEkNqUmfqLRz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df4ab98dd5db166505124f7fcd19dd17

Files

df4ab98dd5db166505124f7fcd19dd17
.exe windows:4 windows x86 arch:x86

f4eb571d55c24c75876d5436bc7c79b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
ReadFile
GlobalAlloc
WriteFile
lstrcpyA
GetModuleHandleA
ExitProcess
CreateFileA
SetFilePointer
CloseHandle

user32

EnableWindow
GetDlgItem
GetDlgItemTextA
DispatchMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PeekMessageA
PostQuitMessage
RegisterClassExA
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
ShowWindow
TranslateMessage
UnregisterClassA
UpdateWindow
DestroyWindow
DefWindowProcA
CreateWindowExA
GetMessageA

comdlg32

GetOpenFileNameA

gdi32

CreateFontIndirectA
DeleteObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

splasher
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE