dff81295e58e04c7035510d27c156fc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dff81295e58e04c7035510d27c156fc7
Size

131KB
MD5

dff81295e58e04c7035510d27c156fc7
SHA1

2a2992c8338d0447e513132069f22c66bc7f06ad
SHA256

942df65548b5053eb98cba3ceed280d4ae37ac3a6f4642bc148d8c48e16396b3
SHA512

c0282ff2d86762eb29a93227e901ddb80aba2e878c0b40e471f6dc7acc4d11231897d6636db3baf645b14b8a2899f661591d80d5e426429f8bd70f001086eba4
SSDEEP

3072:L7okObveISW9HF8hDXT3AnuB61Vbsdka+YR:v7Oje638lkuB618+Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff81295e58e04c7035510d27c156fc7

Files

dff81295e58e04c7035510d27c156fc7
.exe windows:4 windows x86 arch:x86

ee95db37074c842d63ce038f6da8a24b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA
CharNextA
GetSysColorBrush
GetMenu
CharLowerBuffA
CharNextW
CharUpperBuffA
IsChild
CheckMenuItem

kernel32

LocalAlloc
lstrlenW
GetCurrentThread
lstrlenA
IsBadReadPtr
VirtualAllocEx
GetCommandLineW
LoadLibraryA
ExitProcess

msvcrt

memcpy
atol
malloc
wcscspn
_acmdln
sqrt
exit
mbstowcs

version

GetFileVersionInfoSizeA
VerQueryValueA

gdi32

CreateCompatibleBitmap
GetBkColor
RestoreDC
GetCurrentPositionEx
SelectObject
CreateBitmap
GetRgnBox
CopyEnhMetaFileA

Exports

Exports

DelB3TUcZQErv
_3JpOzQPU3@4
KDJgC5

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ