df999cbe1e0a2615af7e36bda19cd37ec0c0846f2fd3b353dbd2f9dce4cb8f67 | Triage

Sharing

General

Target

df999cbe1e0a2615af7e36bda19cd37ec0c0846f2fd3b353dbd2f9dce4cb8f67
Size

1.1MB
MD5

ae1069da6c8ddce0bea1c8b31efbfba8
SHA1

fa078b37bb746332ec7d53ca0a39ac834463af14
SHA256

df999cbe1e0a2615af7e36bda19cd37ec0c0846f2fd3b353dbd2f9dce4cb8f67
SHA512

447d1371aab25dffb608da53ee84fc48f1ed04040844eb8dc4c219b22c4b7fd3077a4dd591da8238eb38982c5152c99f5e2a684582aa4a89bef91c0b8ed49dce
SSDEEP

24576:THvYu8q56gok7iuHS6kfJEUbgJKSQ5xCyCF3KKeuS:lWkLHjkhEUbg8SvF3LS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df999cbe1e0a2615af7e36bda19cd37ec0c0846f2fd3b353dbd2f9dce4cb8f67

Files

df999cbe1e0a2615af7e36bda19cd37ec0c0846f2fd3b353dbd2f9dce4cb8f67
.exe windows:4 windows x86 arch:x86

32c5de998b5f069b26c94c8143b13c06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 337KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 732KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ