d0df6046a2b4ed25f18bed70b44213ac30a47e205c80b4eccae3de2e9dbc45ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0df6046a2b4ed25f18bed70b44213ac30a47e205c80b4eccae3de2e9dbc45ca
Size

137KB
MD5

373aa1296d74b4697bf04d06e7873ddc
SHA1

7fe39925dd441e0a8e2032ad8f6ee4546cf7f883
SHA256

d0df6046a2b4ed25f18bed70b44213ac30a47e205c80b4eccae3de2e9dbc45ca
SHA512

10b86505df5ee8d47595351a30d2f6418d9cb386b9c18442fdb2af99dc0007f80c8e361bb058c9b8a3c13fdd04032afce6c2edaac7d7d07fc6a35c47f2d43e61
SSDEEP

3072:Ggaqjuv8j6h+ZnuA5ErOOzdjY1aS9UXh02gfIbij6jXR:GLiuv8j7ZuA5ErOOze1QXh0jfLwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0df6046a2b4ed25f18bed70b44213ac30a47e205c80b4eccae3de2e9dbc45ca

Files

d0df6046a2b4ed25f18bed70b44213ac30a47e205c80b4eccae3de2e9dbc45ca
.exe windows:1 windows x86 arch:x86

187553847b5ea54b105cce03f3a97423

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiOpenDevRegKey

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 844B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 300B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE