8579b7216531e90ff680e26d1fc8bebaf26a1feb91d11874d8193f1ee017d40b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8579b7216531e90ff680e26d1fc8bebaf26a1feb91d11874d8193f1ee017d40b
Size

3.4MB
MD5

8a451840d40b53f1aeb12d9996958c09
SHA1

71e79ada18d3e926f17c61fcbf845b67b4e0dfa1
SHA256

8579b7216531e90ff680e26d1fc8bebaf26a1feb91d11874d8193f1ee017d40b
SHA512

9bc02176d728b0df08957b6a54af5198545173193c241450988521663f27b0e01ebdd0cb5884abbb2c7ddd6903a0df576bc68507e89aa63d55d26bb9e2028f92
SSDEEP

24576:03s0+J3s0y30Ex0qt+n/P1SU1nPCMnJp9U+3s0+ZdSU1nPCMnJp9UNhT4wQCau1I:Avno

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8579b7216531e90ff680e26d1fc8bebaf26a1feb91d11874d8193f1ee017d40b

Files

8579b7216531e90ff680e26d1fc8bebaf26a1feb91d11874d8193f1ee017d40b
.exe windows:6 windows x86 arch:x86

ccdb46cbbeea89bfb761ae53e6c8bc32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLogicalDrives
GetProcessVersion
GetSystemDirectoryW
GlobalLock
GlobalUnlock
TerminateProcess

user32

CloseClipboard
GetClipboardData
GetDC
GetSystemMetrics
GetWindowInfo
GetWindowLongW
OpenClipboard
ReleaseDC

ole32

CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
StretchBlt

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ