dc1a67190f004ce7a5ffa417b22a77bd24bcf86e48d1be56fca75d697b6907ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc1a67190f004ce7a5ffa417b22a77bd24bcf86e48d1be56fca75d697b6907ae
Size

22KB
MD5

7c313088a3a3c25e34962a78221aa8e8
SHA1

559fb17dcf6ee94266162fe1a18a98f97d8f9077
SHA256

dc1a67190f004ce7a5ffa417b22a77bd24bcf86e48d1be56fca75d697b6907ae
SHA512

0d87e5aa56a591aaf2e7f93b6347002e9ded983e28fab3483b2d379718516571ba2c36d2e35fef26c1cbcb007f8bd119f90d2ebc5be436bf038a238644e25a39
SSDEEP

384:WFMYbZen6/B4dU/Esksdus8wKl/eUODyyyyyyyyyyyyyyyyyyyyyyyyyyy6NhuY0:WFNe6/BjPLIs8wKFeUOVNhughw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc1a67190f004ce7a5ffa417b22a77bd24bcf86e48d1be56fca75d697b6907ae

Files

dc1a67190f004ce7a5ffa417b22a77bd24bcf86e48d1be56fca75d697b6907ae
.exe windows:4 windows x86 arch:x86

6be52c3df58d7b8e5761737f6ce3880f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
DestroyWindow
DefWindowProcA
SendMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
PostQuitMessage
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
ExitProcess
HeapAlloc
GetModuleFileNameA
CreateFileA
GetModuleHandleA
FindFirstFileA
FindClose
GetFileSize
FindNextFileA
CloseHandle
lstrcpynA
DeleteFileA
GetEnvironmentStringsA
GetLogicalDriveStringsA
GetProcessHeap
GetFileType

gdi32

CreateFontIndirectA

shfolder

SHGetFolderPathA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ