daeaa53965c68e10061c1f63569398dd01819b353fcbcf05ff2bee746a05f94f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daeaa53965c68e10061c1f63569398dd01819b353fcbcf05ff2bee746a05f94f
Size

8.4MB
MD5

fcec739e021b884a46bfadf565fbc946
SHA1

c6920f391c5edaf213e0a0816ef3ee5204786aae
SHA256

daeaa53965c68e10061c1f63569398dd01819b353fcbcf05ff2bee746a05f94f
SHA512

9b39f349ec5d8f4dace63b4afa2d3f40dd7478466951f79e4b842767d7638cf9bb9886a87fe39355cd702771d2a5474b6a71b23e0dafe02ea70f0b1d34a2e078
SSDEEP

98304:QHo+2YE/RSGBUdB5d2fgBgCBNp+YrxhSh91laZo2aUdt:KqYE/NudHdggBgCLpJjSa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daeaa53965c68e10061c1f63569398dd01819b353fcbcf05ff2bee746a05f94f

Files

daeaa53965c68e10061c1f63569398dd01819b353fcbcf05ff2bee746a05f94f
.exe windows:4 windows x86 arch:x86

32c5de998b5f069b26c94c8143b13c06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lls
Size: 747KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 357KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lls
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ