af93a07067da596585b0b4eeb72c7895 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af93a07067da596585b0b4eeb72c7895
Size

33KB
MD5

af93a07067da596585b0b4eeb72c7895
SHA1

7e782e54f0024cc3c0d55e2881a190ac9b1d45ee
SHA256

2b515dda05bb455c55fb75a0e189a6f59e59ff41ddd56689478d405c2addf24b
SHA512

ded8a836cd5efb5a4650cbe3f95b88108e3cfc95014f53c1a09a74360c7c32e3eef4f25d2125fcbeda5148c2ad2045a97bbe238b4a1ca790d4f87f05324d8278
SSDEEP

768:mOsRwv9FVnly4CFgwfhxijXwaBFYYFkwu07/4ogv:tvv3VlXVwfhsjXwafYYFbuLogv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af93a07067da596585b0b4eeb72c7895

Files

af93a07067da596585b0b4eeb72c7895
.exe windows:6 windows x86 arch:x86

256cd8cedfd4fcb3bc9db32e27e5923a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

CreateWindowExW
DefWindowProcW
RegisterClassExW
GetDesktopWindow
SetForegroundWindow

msvcrt

_wcmdln
_except_handler4_common
?terminate@@YAXXZ
_controlfp
__set_app_type
__p__fmode
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsicmp
memset
__p__commode
__setusermatherr
_amsg_exit
_initterm

shell32

CommandLineToArgvW

pcaui

PcaLaunchApplicationWithConsent
PcaPersistSettingsAndLaunchApplication

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE