dfcbd20580d9ac05409881d4802e7111 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfcbd20580d9ac05409881d4802e7111
Size

6KB
MD5

dfcbd20580d9ac05409881d4802e7111
SHA1

a53e6eabbf2cd5428f6ece8cd6587d04745a1271
SHA256

5db4f7ab7b224d73921ed8dcef951b1d2ebcafd6fbd47cb1762e4fbf8d7ea8c6
SHA512

1cc280d95ec2afe044c148e1205d761419df93554f423f7a29add2ffb43350214e8dbc38424dc6bc63ab56710bf4cad9be343843d6ac4302431a648b329fc0bc
SSDEEP

96:93sKuf9v5zj+Yl3kZw0FPATQ6xbbQ1XTZc/wW8ZQEFaPtboyn6Ova:aKkv5zLpb9/wWbBP1oynB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfcbd20580d9ac05409881d4802e7111

Files

dfcbd20580d9ac05409881d4802e7111
.exe windows:4 windows x86 arch:x86

ddf26b12ff9c5093b30a832bb24cf142

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
WinExec
DeleteFileA
GetLastError
MultiByteToWideChar
lstrlenA
InterlockedDecrement
GetStartupInfoA
GetModuleHandleA
LocalFree

ole32

CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysFreeString
VariantClear
GetErrorInfo
SysAllocString

msvcrt

_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__CxxFrameHandler
_EH_prolog
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE