2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126 | Triage

Sharing

General

Target

2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126
Size

298KB
MD5

978be4789ed0cad37f9d68cb22755ecc
SHA1

01739f2690942d15088f3134b2920d9eb56b63d1
SHA256

2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126
SHA512

4543b8fd5a3edc6f6849590567715463c84b6b634b09fd105f3bf399f8dbd1ab27d171f2b3fc26d1a84538e62f8af5ea15108b8ba99ed5f872cf5ec0a3b12519
SSDEEP

6144:tg2+9iGTB9AkBZ1ot+2i//BfseenF9PtqE10yTFoKc+Pp:E9PTBFCKottqATFRcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126

Files

2663efd03818f4459b8abd683662fbe7c325b1fed3f552c52ff60dce292ca126
.exe windows:6 windows x86 arch:x86

2d05f25bcaf5848849812d4fbc9bd796

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetConsoleWindow
GetLastError
GetStdHandle
GlobalLock
GlobalUnlock

ole32

CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

user32

CloseClipboard
GetClipboardData
GetDC
GetSystemMetrics
GetWindowInfo
OpenClipboard
ReleaseDC

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
SelectPalette

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ