dfcc75f932e6f0ca1f118a64d4e72c59 | Triage

Sharing

General

Target

dfcc75f932e6f0ca1f118a64d4e72c59
Size

37KB
MD5

dfcc75f932e6f0ca1f118a64d4e72c59
SHA1

b0c1307240282f9103e5977d99bcb61cd90bb6ed
SHA256

848dad78e3ee6ac657f85120aea1aff0c7c737e39d9cebac1ecd0494fa7b6bcd
SHA512

3c23bf5dc85e8dd3efcff11d93878caa2a03827b656e6d928744ddd338dd0d39fa5666ca8aec52d1e32a3d172d0d9d53a0cba5ecf8a355efef0a32b8b7a06152
SSDEEP

768:Ex2T/9il71c0TDgObnUcJG1H2AinLkJ2Wf1R9JXNXls:Ex2T/QTDWcJi2ADJ2WdR9J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfcc75f932e6f0ca1f118a64d4e72c59

Files

dfcc75f932e6f0ca1f118a64d4e72c59
.exe windows:4 windows x86 arch:x86

04732912e723f2daf51104b175cba2e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

WinExec
lstrcmpA
lstrlenW
GetModuleHandleA
lstrlenA
CreateThread
ExitThread
CreateFileA
GetVersionExA
VirtualProtect
lstrcpyA
ReadFile
CreateFileMappingA
VirtualAlloc
GetFileTime
SetThreadPriority
GetLastError
Sleep
GetTickCount
DeleteFileA
lstrcmpiA
GetLocaleInfoA
TerminateThread
VirtualFree
SetEndOfFile
SetFilePointer
CloseHandle
WideCharToMultiByte
MapViewOfFile
GetProcAddress
WriteFile
ExitProcess
LoadLibraryA
lstrcatA
GetFileSize

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE