dabf9bbd66c87ede7da52c0aa2c91aa66e33f1f822b321bd57308ec8770266e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dabf9bbd66c87ede7da52c0aa2c91aa66e33f1f822b321bd57308ec8770266e3
Size

1.7MB
MD5

8424250af58973f0f54d014742fb8de3
SHA1

caa6fffe25be600f56fc47537bddbea1f5edc04f
SHA256

dabf9bbd66c87ede7da52c0aa2c91aa66e33f1f822b321bd57308ec8770266e3
SHA512

5721ffae577af3c7c68f82574f73b0df4c8565aa302e0171904de4e2756d1c155b2cc314678ec214e5762283baac2ec88494962a118ad28cc890d96039d45e46
SSDEEP

49152:SwdyW68X6Gqbaok2AeGJ0sgZ0TN4XzsfA3ex/:SS3zqWw20szG/3g/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dabf9bbd66c87ede7da52c0aa2c91aa66e33f1f822b321bd57308ec8770266e3

Files

dabf9bbd66c87ede7da52c0aa2c91aa66e33f1f822b321bd57308ec8770266e3
.exe windows:4 windows x86 arch:x86

703074f7e4b33aefff112f419dacba1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4218

msvcrt

atoi

kernel32

HeapFree

user32

ValidateRect

gdi32

SelectObject

comctl32

ImageList_AddMasked

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 704KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1008KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ