a1c85e742c94a2fc47e99cf72e7ec9198fbd9dda5fab682d777fc0948a70a419 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1c85e742c94a2fc47e99cf72e7ec9198fbd9dda5fab682d777fc0948a70a419
Size

310KB
MD5

5f9b0a38919879a7664ae3c3d1f1931b
SHA1

bc776ea49fa4fe352ad32e6cb046a659fe7663c6
SHA256

a1c85e742c94a2fc47e99cf72e7ec9198fbd9dda5fab682d777fc0948a70a419
SHA512

d62edffa39d09ed6d9c5cdc1c1ad6191ff1bc148c492f2c831f15b59a0ff8932a7d668db18b59a0eb5b4d113e4cc02b277017dc5a6f4b9ebe32b0bc4760f2703
SSDEEP

6144:gBpTG4BXpGV/5i0KwFEIw8LaggfR4IKqI1jgn+ICk8QSoM:YTPGrC3DDIVgCkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1c85e742c94a2fc47e99cf72e7ec9198fbd9dda5fab682d777fc0948a70a419

Files

a1c85e742c94a2fc47e99cf72e7ec9198fbd9dda5fab682d777fc0948a70a419
.exe windows:6 windows x86 arch:x86

8a08f05f951e29daf72a243fb2aa4e67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CloseClipboard
GetClipboardData
GetDC
GetInputState
GetSystemMetrics
GetWindowLongW
OpenClipboard
ReleaseDC

kernel32

CopyFileW
ExitProcess
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetLogicalDrives
GetSystemDirectoryW
GlobalLock
GlobalUnlock

ole32

CoCreateInstance
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

oleaut32

SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
StretchBlt

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ