5732d1140c71775624ba5e042e87be07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5732d1140c71775624ba5e042e87be07
Size

40KB
MD5

5732d1140c71775624ba5e042e87be07
SHA1

f0b6898889192bf7ec9a813ea30b7b9ffd2cb7a7
SHA256

e098544602cd988a67621ab93ce3f9b21bb0382e3eaf68ee02c19647c55e5d82
SHA512

1729b371208bfeeb1e9219d9415e94cef217563ea631eceb0632001ce799f68c9d5e1ce5674515356aa2feb24bdd56e0e1bd20a4a988ee61691e266bae446f20
SSDEEP

768:GyhyDFwh1D34Ts26dvB10Jd/zIwCeC+VuUkCb8CCMVCV0CVW:GyoA1D34Ts26dvB1N2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5732d1140c71775624ba5e042e87be07

Files

5732d1140c71775624ba5e042e87be07
.exe windows:4 windows x86 arch:x86

8ab7f13850e9fd3663124283ea829723

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
TranslateMessage
RegisterClassExA
LoadCursorA
LoadIconA
LoadStringA
LoadAcceleratorsA
CreateWindowExA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DialogBoxParamA
DestroyWindow
PostMessageA
SendMessageA
SetWindowTextA
EndDialog
TranslateAcceleratorA
DispatchMessageA

kernel32

Sleep
GetLastError
lstrcpynA
GetModuleHandleA
LoadLibraryA
FindClose
FindFirstFileW
CreateDirectoryW
GetStartupInfoA
FindNextFileW
GlobalAlloc
WaitForSingleObject
CreateThread
TerminateThread
CreateMutexW
GlobalSize
ReleaseMutex

comctl32

ord17

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ