df67068ca141928b7e76255967ffbe9a | Triage

Sharing

General

Target

df67068ca141928b7e76255967ffbe9a
Size

392KB
MD5

df67068ca141928b7e76255967ffbe9a
SHA1

e61c7dc8e0b52cbf985913054fecd7adf8ab0187
SHA256

687a28d6ca389ed5abed0d2adae99b524a46ec2964a600aac1cae56d3de06ad7
SHA512

6dfb8c2b6c673cee1a3aed98eeb3895fae61a677e930daf22dde72495153dbf258a945568585bbd57a55642b34d6cb99987dcd3854995a0400ad3a1260cc3784
SSDEEP

6144:WctjjehO5+VLfPYloa3CO9UB5p6QjwvkVaC5o9xxwCJiIoappvCH8:xXehO5sDPJ6CZvjeAK9xKCJifp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df67068ca141928b7e76255967ffbe9a

Files

df67068ca141928b7e76255967ffbe9a
.exe windows:4 windows x86 arch:x86

063db7be3ad4961ab3dbe14019f0af31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
CreateFileA
lstrlenA
GetTickCount
LocalUnlock
LoadLibraryA
GetSystemTime
HeapCreate
Sleep
CreateThread
GetCurrentDirectoryA
CloseHandle
PulseEvent
SetEvent
CreateThread
GetCommandLineW
LocalFree
SetLastError
GetModuleHandleA
GetComputerNameA

user32

GetScrollBarInfo
CreateWindowExA
DrawEdge
CheckRadioButton
GetDlgItem
DrawMenuBar
CallWindowProcA
FillRect
IsWindow
GetDC
SetFocus
GetKeyState
DispatchMessageA

clbcatq

UpdateFromAppChange
DowngradeAPL
SetupOpen
CheckMemoryGates
SetSetupSave

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ