dfac0b276dfe84ffeb5c107a2d76c61e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfac0b276dfe84ffeb5c107a2d76c61e
Size

233KB
MD5

dfac0b276dfe84ffeb5c107a2d76c61e
SHA1

01c43b0539a4258a14b642afdf84cf8fada62209
SHA256

04d1b8963c7ecefe2834c4978761622203b61420b85300e6c3daed47bc4a64a4
SHA512

bf6b268e0bd5128372112bcbfec6c55e9ca5e153ef1180f6bf88561d9bc77df2ba57e0146d727622e72d8cd3f88679810f5dfa7f633641330a46dc7470e886bd
SSDEEP

3072:8inBfCjpHFoo3NDMWSiHEtZdeJv24SXitQdP8ldiyyEZRDQBlZ9orH+pRDHTC1N1:/FCUo9D+Bep24SStQRXNEHWlZGrHc7s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfac0b276dfe84ffeb5c107a2d76c61e

Files

dfac0b276dfe84ffeb5c107a2d76c61e
.exe windows:4 windows x86 arch:x86

4c0287e2be4664370bd5be1e615e5444

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
GetMenu
FindWindowExA
FindWindowA

kernel32

lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
GlobalFree
LocalFree

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 230KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE