d76ff3cf21c1315eceba011c1ade8a60N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d76ff3cf21c1315eceba011c1ade8a60N
Size

166KB
MD5

d76ff3cf21c1315eceba011c1ade8a60
SHA1

f0c74571dc1319fe64e88a7d1e0f0b69315915da
SHA256

227b63d014bd7d24f06a9b2f96073e926e4bcd80630f333dc6627cf1e4010720
SHA512

7d34594d9c36b382f655adb929d26437155715a66dfd54c27e0143b39e3fa45f79eed27d829479e28f8574a99e4c72711bce13955c67e0ade503abe1eefca8f9
SSDEEP

3072:0lkgkiwH71G7JX1vSuDvvH/7llZ1OCUh9GRWuCHwjU/UWYXb/VyxIb/Pi6cyk:0yDiw8lX16uDX/mCUh906uU/UWCjVn/y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d76ff3cf21c1315eceba011c1ade8a60N

Files

d76ff3cf21c1315eceba011c1ade8a60N
.exe windows:5 windows x86 arch:x86

137a9b4a6059d8b53e3c9d8dbb713fc9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\oLolIJoxaKHM\iwzdekfpUkMwd\nlzdccaV\kfiocfmAgquGev.pdb

Imports

gdi32

CreateRectRgn
GetRgnBox

kernel32

CreateFileMappingW
GlobalMemoryStatusEx
GetModuleFileNameW
GetComputerNameA
EnumResourceNamesW
VirtualProtect
CloseHandle

user32

SetWindowTextW
MonitorFromPoint
DefWindowProcA
GetUpdateRgn
TranslateAcceleratorA
SetMenuDefaultItem
TrackPopupMenuEx
WaitForInputIdle
SetFocus
AdjustWindowRect
EnableMenuItem
IsWindowEnabled
CopyRect
SetRectEmpty
FindWindowExA

ntdll

RtlCompareMemory

Exports

Exports

?TemporaryArrayCre

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hvb
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ek
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hv
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ