860dd39c0614c7c5d2f8fb0a047766d6fa4674d7e06811c08076a7b4228d5b8e | Triage

Sharing

General

Target

860dd39c0614c7c5d2f8fb0a047766d6fa4674d7e06811c08076a7b4228d5b8e
Size

353KB
MD5

cdef12b2201eb32296d0ca456bc9f5b7
SHA1

bfd22c932b0aa437395435424890e2d4f60b6341
SHA256

860dd39c0614c7c5d2f8fb0a047766d6fa4674d7e06811c08076a7b4228d5b8e
SHA512

c788fbd05961034d3d101e6b2344fde8819c3b8be3f33c66519a7446671d2c875295fb3148c7fb2206b621f6050618eeb531107c134a8f6ba076b087bbdc7150
SSDEEP

6144:9B0SIpMVcBJqv9V1lySVS+m/KLXEQUxzivsPB5cK/KfdEd1BKqtOuiqJxk+4:T0EVRldA+n8xzivsJ5cK/KfdY1MqAuis

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
860dd39c0614c7c5d2f8fb0a047766d6fa4674d7e06811c08076a7b4228d5b8e

Files

860dd39c0614c7c5d2f8fb0a047766d6fa4674d7e06811c08076a7b4228d5b8e
.exe windows:4 windows x86 arch:x86

dae2297d6dcf6442cc502fc4526a4583

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
VirtualProtect
QueryPerformanceCounter
EnumCalendarInfoW
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleW
CreateProcessA
GetTempFileNameA
HeapFree
HeapAlloc
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW

oleaut32

LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromI1
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString

gdiplus

GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 224KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE