dbc1742a1fc0af90640514e1bfb6352a6a3ab1bc9096aad12375e71483919df6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbc1742a1fc0af90640514e1bfb6352a6a3ab1bc9096aad12375e71483919df6
Size

6.6MB
MD5

fda0ce54517328a6a5eca5c71d24919e
SHA1

157deace1ef8bed5432402fa218970bc9f01932c
SHA256

dbc1742a1fc0af90640514e1bfb6352a6a3ab1bc9096aad12375e71483919df6
SHA512

d42aa36af112a907628d730d18617c2e36983537304293b12d75ea1421eea7a7d321d456c27539e803e0fb83422005b65b6886089a7f9212ea5a5d91cf623162
SSDEEP

98304:Re0o7W6Fqd+8fliQXBu05xjXCZoFuDJNlYUvcLsulYZ/ZgJL:To7WjYQnryhNNlYUvcLb2nCL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbc1742a1fc0af90640514e1bfb6352a6a3ab1bc9096aad12375e71483919df6

Files

dbc1742a1fc0af90640514e1bfb6352a6a3ab1bc9096aad12375e71483919df6
.exe windows:4 windows x86 arch:x86

32c5de998b5f069b26c94c8143b13c06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ