dbff6e119f814eb09d5b9840210d2bf02b2e5256a8532b850a56b72bfbdc00d3N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbff6e119f814eb09d5b9840210d2bf02b2e5256a8532b850a56b72bfbdc00d3N
Size

234KB
MD5

9be7bb4b29c4c072b0c6d792173e3f20
SHA1

3bb59f81308edff45ae232e5326349cf19f326d3
SHA256

dbff6e119f814eb09d5b9840210d2bf02b2e5256a8532b850a56b72bfbdc00d3
SHA512

2ac8defb2a2a1c3d7fc538bf3efb2fbbbe5d99110bdc28ba7fc2af46935b8a611d435ed019774f7c904a601e430729f5a2de6cee05c16d3f6e56b074af766823
SSDEEP

6144:k6M3VvB9ZMYptuFzbWG1vrNe2x3Q+W7Gr1Hop8:k6FTFzp5rU2++v1l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbff6e119f814eb09d5b9840210d2bf02b2e5256a8532b850a56b72bfbdc00d3N

Files

dbff6e119f814eb09d5b9840210d2bf02b2e5256a8532b850a56b72bfbdc00d3N
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE