7744a190992a70a08f9e09a4754ced4fb318807918fcd4f4d5a7578eb0e2af88 | Triage

Sharing

General

Target

7744a190992a70a08f9e09a4754ced4fb318807918fcd4f4d5a7578eb0e2af88
Size

12.5MB
MD5

e831f4b802a12c45838ace8102bcfc58
SHA1

dbd3b98d2e61b0a585667618dd3f215292b9dea4
SHA256

7744a190992a70a08f9e09a4754ced4fb318807918fcd4f4d5a7578eb0e2af88
SHA512

18d3c040a46129015cbb3b3b56385f3bef2ed3d8f887b15597bd9279cd0b623160f974c5c45bedc48cfc02375a43e85f862091f043116730ffa6d98da2b0192a
SSDEEP

393216:qWWy5LCXVOhzCED6J83a10HXdwWFtNITfZWqhHsZVN:qW/5LCFOhzCEDIEaotwetNiPH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7744a190992a70a08f9e09a4754ced4fb318807918fcd4f4d5a7578eb0e2af88

Files

7744a190992a70a08f9e09a4754ced4fb318807918fcd4f4d5a7578eb0e2af88
.exe windows:5 windows x64 arch:x64

58195c87a65d5d06bea9db79b004b909

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW

comctl32

ord380

kernel32

IsValidCodePage

advapi32

OpenProcessToken

gdi32

SelectObject

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 145KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
steamshare.pyc