day[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

day.exe
Size

51KB
MD5

c3d29be392b5e95f29ff57c41acff1ce
SHA1

837e3dcb9f599720967d22614f525f9fc6ff4db4
SHA256

db001c706193f69e97eef1d6217f050b9f4ddf4781c802f3c990464a107b1db2
SHA512

a853cfc205f963fe1b1fb1546c6c608687874953d5abb742f7f0095bfcfe675bfa7ac1d958db7d3f25ed2501192f24745ac1e301ccf8351e747d60db43a5b6ae
SSDEEP

768:2LXQsgNDEGR1PL9ato3eipislf0JcJt4o6zkbe6JEPXnIi:M1gNnR1PL9YoOIlfOcJt4XAGPXIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
day.exe

Files

day.exe
.exe windows:4 windows x86 arch:x86

1a3d8c3f39a0e02fe506a5bee2936643

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm115

ord67

kernel32

VirtualFree
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetCommandLineW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ