dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb | Triage

Sharing

General

Target

dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb
Size

31KB
MD5

995a7fb88d7f0a08c4038ab4a7803d0b
SHA1

5909705a9a095efda242d068ddfadb9adf9ce6b3
SHA256

dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb
SHA512

c86bc3fab5a12948a783ead842754afb66421538ee343e92486f6b98239c77c91dff805917daacaa1cb4c41f4fd72c2e6d6e8db5fd799dcfa4060b7dc9dc994a
SSDEEP

192:KlApk98m4e0/IDJh/5ZQcvoyne4t/PQ3Pw1C0SluWbiWBNEckcVhJriE/mtf:MApc8m4e0GvQak4JI341C0abnk6hJPKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb

Files

dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb
.exe windows:4 windows x86 arch:x86

7ecd8f76627cb5379a7c0b0c02b48c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
MoveFileW
GetSystemDirectoryW

shell32

ShellExecuteW

msvcrt

_wstat
_exit
exit
wcscmp
wcscat
fclose
memset
fread
fseek
_wfopen
fwrite
wcslen
wcscpy
wcsstr
__p__commode
wcsncpy
__p__fmode
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
_wcslwr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE