c989aea59682e8b04dce45a7fa4b1cc6ee9eac2cdb80f1d910c39a3daa501b88 | Triage

Sharing

General

Target

c989aea59682e8b04dce45a7fa4b1cc6ee9eac2cdb80f1d910c39a3daa501b88
Size

39KB
MD5

1fe9b55aa2acb975ab8afe02fb2d537f
SHA1

e0adeef3380b04205189cdb8b39dc4e321f670ad
SHA256

c989aea59682e8b04dce45a7fa4b1cc6ee9eac2cdb80f1d910c39a3daa501b88
SHA512

865142987fdf058443af7270f93088618063732dd6c159aec9e9af7f7ffb5cc83f4a9985e3c143f4690a8559d83c528ff6ce071339dbaac17075390eb40010fc
SSDEEP

768:K3dyWjstY9ZTNnzyrIrOyvUVjpxFyhT37Ah1oe4+Dj6DBr:EyWjJ9xVVKyejHFyhTU3orRD9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c989aea59682e8b04dce45a7fa4b1cc6ee9eac2cdb80f1d910c39a3daa501b88

Files

c989aea59682e8b04dce45a7fa4b1cc6ee9eac2cdb80f1d910c39a3daa501b88
.exe windows x86

a851beb881fc1d17524357db3f3a9a57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowEnabled
CountClipboardFormats
BeginPaint
EndPaint
GetCaretPos
GetCapture
SetWindowTextA
EnableWindow
DialogBoxParamA
RegisterClassExA
CreateWindowExA

gdi32

CreateRoundRectRgn
GetColorSpace
DeleteObject
GetTextColor
GetStockObject
GdiFlush

comctl32

ord17

kernel32

GetProcAddress
MulDiv
HeapAlloc
LoadLibraryA
HeapFree
GetLastError
SetEndOfFile
GetDateFormatA
HeapDestroy
GetTickCount
HeapCreate
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
GetEnvironmentVariableA
EnterCriticalSection
InitializeCriticalSection
SetFileAttributesA
FreeLibrary
GetEnvironmentStrings

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ