dfdc69e3b15ae7e61640a7a7a905bcf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfdc69e3b15ae7e61640a7a7a905bcf0
Size

90KB
MD5

dfdc69e3b15ae7e61640a7a7a905bcf0
SHA1

989c570c31378396d458888be2c49fb39014746f
SHA256

05aa33e1e2b8502d67aa0d1d74d3542f82492ea71156ec203d8e8d889da09aa6
SHA512

749d016b8970c29714bc39263e7591879c5097bfac32dcfc6c43633dc3eff0702f6716b1a80909aca1e568571f565b06f0b8f07deba1eca08896633faa0225dd
SSDEEP

1536:PcpQzPUlAa8uR+LUkprrqbIlkjNmVBzW6+TSO8ebdtjWqnZvfY:JT8RCxS+kjkVMRp8eby4vQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfdc69e3b15ae7e61640a7a7a905bcf0

Files

dfdc69e3b15ae7e61640a7a7a905bcf0
.exe windows:4 windows x86 arch:x86

40b5c61c5618fab52ff3159172bf67c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DestroyCaret
CreateMDIWindowA
CreateDialogIndirectParamA
CreateCursor
CreateAcceleratorTableA
CopyImage

kernel32

GetPrivateProfileStringA
lstrlenA
lstrcpyA
lstrcmpiA
WriteFile
VirtualFree
UnmapViewOfFile
TlsAlloc
CloseHandle
EnumResourceNamesA
ExitProcess
FlushFileBuffers
GetCommandLineA
GetLocalTime
GetStartupInfoA
GetTimeFormatA
GetVersion
InitializeCriticalSection
SetLastError

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE