d61d2772dc9bd808c17c2862d4be8aa61ccc6851012967e82b2f514f94ab6f97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d61d2772dc9bd808c17c2862d4be8aa61ccc6851012967e82b2f514f94ab6f97
Size

273KB
MD5

2d8bfa12ffd53e578028edae844e7611
SHA1

a0db3c316b9fc54b056ccb4cf284b90c95bfa605
SHA256

d61d2772dc9bd808c17c2862d4be8aa61ccc6851012967e82b2f514f94ab6f97
SHA512

8a107dcb884a19492604487f044f5e90aadfc6fd6594b3271081167bde5180c2db4fcf5333fa141944dc209f19476bf5a2c2d24f419a482cd94510185b1cc0a7
SSDEEP

6144:Kbhom3cQPHj2cdTL+8yd5qmnNzY1FuFxqvE:GomMcHj2SWFZhKqxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d61d2772dc9bd808c17c2862d4be8aa61ccc6851012967e82b2f514f94ab6f97

Files

d61d2772dc9bd808c17c2862d4be8aa61ccc6851012967e82b2f514f94ab6f97
.exe windows:6 windows x86 arch:x86

9fd5b8944ce9c3acaedc650793d4996e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileW
ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLogicalDrives
GetSystemDirectoryW
GlobalLock
GlobalUnlock

user32

CloseClipboard
GetClipboardData
GetDC
GetSystemMetrics
GetWindowInfo
GetWindowLongW
OpenClipboard
ReleaseDC

ole32

CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
StretchBlt

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

Sections

.text
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ