df85f7f830dc3f0a2834eeb1e18847fc1ce463051e4f1e48e644a61527473e49 | Triage

Sharing

General

Target

df85f7f830dc3f0a2834eeb1e18847fc1ce463051e4f1e48e644a61527473e49
Size

22KB
MD5

da8c035cda6aa081d2e102ed080b45ac
SHA1

bb1b06332d383af229c73f65f8fd2a07b390fb59
SHA256

df85f7f830dc3f0a2834eeb1e18847fc1ce463051e4f1e48e644a61527473e49
SHA512

ece4e087ffa9cff49695543c3c1d1a24a65789d2fb9f512d21df38557fbffe090bce401ac208f54bb73cebf5eea66b4e32eaa580b6d63fedd780181be72b5723
SSDEEP

384:twPmgHNs0HDT2rLEqYFa9CEacNRF4qCG66nVPaRAQF:uPHGuSrB0EakzhCG617F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df85f7f830dc3f0a2834eeb1e18847fc1ce463051e4f1e48e644a61527473e49

Files

df85f7f830dc3f0a2834eeb1e18847fc1ce463051e4f1e48e644a61527473e49
.exe windows:5 windows x86 arch:x86

92a943ee4a19b671211e8e896bab8035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
CreateMenu
GetSystemMenu
GetDoubleClickTime
UpdateWindow
GetQueueStatus
LoadIconA
RegisterClassA

gdi32

CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
Rectangle
CreateSolidBrush
GetStockObject
RealizePalette

msacm32

acmStreamConvert
acmStreamOpen

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ