dee7d5a93582e728d0ed9ffd03f8c27a4442ebcbe2b0e2c6afa61edfbd092688 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dee7d5a93582e728d0ed9ffd03f8c27a4442ebcbe2b0e2c6afa61edfbd092688
Size

23KB
MD5

5509928133f5b27d7c14b2fb3942e363
SHA1

a7a3fdb25fdeb0fdcf131db95aabbd637b591614
SHA256

dee7d5a93582e728d0ed9ffd03f8c27a4442ebcbe2b0e2c6afa61edfbd092688
SHA512

c60a3ab1e2e269c189fd43dfccefdf9e63976406d9f3fa9304ba8cc744750e2e60ad94c0903888a4c14a22b09f07f3709aaa4401d7c2c09666bb41950a9eb340
SSDEEP

384:CBOkkLPcM4JIM39ZR8Z87XHjeKtEEue+63BYp2tOOtEvwDpjqIGRsAM:CB19M4JIhZMHSKtweHBrtOOtEvwDpj1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dee7d5a93582e728d0ed9ffd03f8c27a4442ebcbe2b0e2c6afa61edfbd092688

Files

dee7d5a93582e728d0ed9ffd03f8c27a4442ebcbe2b0e2c6afa61edfbd092688
.exe windows:5 windows x86 arch:x86

1a37837ee1c6a4695e0f8fcef0f6b4f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

gdi32

CreateFontIndirectA

user32

EndPaint

Sections

.MPRESS1
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE