dff4d5b63ca2007338c29867efd62d6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dff4d5b63ca2007338c29867efd62d6e
Size

751KB
MD5

dff4d5b63ca2007338c29867efd62d6e
SHA1

72941a4ada1b99aa7900ef9ac8a5101ecdd966cd
SHA256

1ea5fd458c6b70c5408cc4782928b1b1b828e679251801421c3a4d2f6da65fdb
SHA512

055b5592011f31c9aeef7c6f5c9bbb487027a990602bbcf27cafd33486be2913a8caf6ee2843c5a0e5473e85507d2c79c3efdf6dc3b320bc4fd0140038d60050
SSDEEP

12288:hXtN/E8I5CfMJAvey1ZbQQyUcD7Welt3qO6720Z/XY/wDoVNgkA:hXtN/ECfMiV8QylCuqh2mXQed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff4d5b63ca2007338c29867efd62d6e

Files

dff4d5b63ca2007338c29867efd62d6e
.exe windows:4 windows x86 arch:x86

e6ff59b1a8e80632e620d5eb5b2b8390

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
FindClose
GetTickCount
HeapSize
GetStartupInfoW
GetModuleHandleA
Sleep
GetProfileIntA
WaitForSingleObject
CloseHandle
ReleaseMutex
GetEnvironmentVariableA
GetLocalTime
CreateMutexW
CreateFileA
GetTickCount
GetCurrentDirectoryA
HeapCreate
WaitForMultipleObjects
SetLastError
RemoveDirectoryW
DeleteFileA
ExitProcess
GetFileSize
GetStdHandle

user32

GetClassInfoA
GetDC
GetDC
CallWindowProcW
DispatchMessageW
PeekMessageA
MessageBoxA
GetDC
DispatchMessageW
GetSysColor
GetCursorPos
GetWindowLongA
GetDC

wshcon

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 746KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ