ea2ad4d16696a90666a9f6bd5ab1c5ddabbc98124dcaef8f3042b3510aa2fb53 | Triage

Sharing

General

Target

ea2ad4d16696a90666a9f6bd5ab1c5ddabbc98124dcaef8f3042b3510aa2fb53
Size

20KB
MD5

8fbedef2d4227d596e411ec25dc25f2c
SHA1

03847c5cae894b3cd96b2f3a5eab34ad0266d780
SHA256

ea2ad4d16696a90666a9f6bd5ab1c5ddabbc98124dcaef8f3042b3510aa2fb53
SHA512

a29e7ef85aee6cab3e596aa3583337a382df4da8582e38a729d973975772d51e1c9595c23f5372284400fd7bb32b2dc43217012b611dd7b0b8c8e6b4b0b5fd30
SSDEEP

48:KahWYwz9DuWPHvg7Z4eK3UY/qtYPw10InlOoyl16OgcDpun5nq9EeJB:V0WWPPyZI39qiK0IlOoyn6HQ9EY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea2ad4d16696a90666a9f6bd5ab1c5ddabbc98124dcaef8f3042b3510aa2fb53

Files

ea2ad4d16696a90666a9f6bd5ab1c5ddabbc98124dcaef8f3042b3510aa2fb53
.exe windows x86

dcb29856ddad8f0bd792f98273f215e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW

user32

LoadCursorW
LoadIconW
RegisterClassW
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
PostQuitMessage

mfc42u

ord815
ord561

msvcrt

__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
exit
_XcptFilter
_exit

msvcp60

??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ