df6d4fb5b398bc1051f5a5914d7e41b6 | Triage

Sharing

General

Target

df6d4fb5b398bc1051f5a5914d7e41b6
Size

279KB
MD5

df6d4fb5b398bc1051f5a5914d7e41b6
SHA1

8055da8133ae2398edafd675bac8f5315dabbeba
SHA256

dee566569bb0f7ecb40d8148fe88e4643cfecd03fcf796866fe1cd582e023bc1
SHA512

61d0ce8421eb620122790d3124e231954d88cb270c54369d5d77cc135c448f9d8ca3c409ed66d47e9aecd9c25af85e2526401ab1f11260f56f919426b7fac54c
SSDEEP

6144:J7nr+l65RAHqjeEnozHOEKS64yoRHfmTj8UiUDTQv:J7XRGgdozHLDLRH+NXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

df6d4fb5b398bc1051f5a5914d7e41b6

Files

df6d4fb5b398bc1051f5a5914d7e41b6
.exe windows:4 windows x86 arch:x86

024c7ffedda7847622829546224ab03b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

kernel32

UnhandledExceptionFilter
AddAtomA
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
EnumResourceLanguagesA
WriteFile
GetNumberFormatW
GetStartupInfoA
GetEnvironmentStringsW
GetCPInfo
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

EnumChildWindows
GetDlgItem
DestroyWindow
CreateWindowExW
SendMessageA
IsWindow
GetWindowThreadProcessId

Sections

.text
Size: 142KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ