795d88b617f316f6159ec227c43f41cfafa9f70d8988071c0efed8ac19948156N | Triage

Sharing

General

Target

795d88b617f316f6159ec227c43f41cfafa9f70d8988071c0efed8ac19948156N
Size

110KB
MD5

10ea09bb51f7b505d0cb38f1ba892b00
SHA1

51ab6a56e7899e63852e5e52b1f6752af368efee
SHA256

795d88b617f316f6159ec227c43f41cfafa9f70d8988071c0efed8ac19948156
SHA512

9c4562095babc131cd93ddcb6f21ef26b8291bcc48a8367f655693fd3a496a9105a66af8a9e8f5683e38ae1b1cfb8f4d9533993c28c14fc9d278c60d078368c8
SSDEEP

1536:JnrUC6wjWJX70LJ2mUuOIkgjiq9ehb1FHGb1W7CNbGWz5tKi6ELMja2ZmBis3:RUCfWJoVCIk94eF19GYTIV20Bis

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
795d88b617f316f6159ec227c43f41cfafa9f70d8988071c0efed8ac19948156N

Files

795d88b617f316f6159ec227c43f41cfafa9f70d8988071c0efed8ac19948156N
.exe windows:5 windows x86 arch:x86

78e642781c58e90b9b4ab1e442806e1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
CharNextA
GetSystemMetrics
GetDC
TranslateMessage
GetDesktopWindow

kernel32

DeleteFileA
lstrcmpiA
lstrcmpA
GetSystemTime
lstrlenA
GetCommandLineA
lstrlenW
lstrcmpiW
GetModuleHandleA
CopyFileA
GetWindowsDirectoryA
QueryPerformanceCounter
RemoveDirectoryW
GlobalFindAtomA
FindClose
VirtualAlloc
RemoveDirectoryA
VirtualFree

gdi32

LineTo
RestoreDC
RectVisible
SetTextColor
DeleteDC
CreateFontIndirectA
GetClipBox
GetStockObject
GetDeviceCaps
GetTextMetricsA
GetObjectA
DeleteObject
SelectPalette
CreatePalette
SaveDC
GetPixel
SelectObject
SetStretchBltMode
SetTextAlign
CreateSolidBrush

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ