59d5139c02b1f4b52b39c1547c67ac30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59d5139c02b1f4b52b39c1547c67ac30
Size

116KB
MD5

59d5139c02b1f4b52b39c1547c67ac30
SHA1

dda34cbd2ff3c176eb0a645ffd3f450d1e475382
SHA256

775e275f471842893c46d4ebf4bacaff654de216ddfe4ab42a4896bbf95e8fe2
SHA512

d7b085f24f0df92d756f4a63e395ecda25251b56580d7b1320917eeb025e16c01b1402d5a86e0b7988e490189fa3765cdb945e0cbd5b56b8b4cbb65383adabc2
SSDEEP

3072:vyQb8F20+2NQE5CktSiy7S7BKXio9uCq:vM1/5Chinm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59d5139c02b1f4b52b39c1547c67ac30

Files

59d5139c02b1f4b52b39c1547c67ac30
.exe windows:4 windows x86 arch:x86

216597b281849e646fdb1eedda283164

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
LoadStringA
wsprintfA
MessageBoxA
LoadCursorA
RegisterClassA
CreateWindowExA
DefWindowProcA
CharNextA
LoadIconA
SetClassLongA

kernel32

GetStartupInfoA
GetCommandLineA
GetLastError
SetErrorMode
LoadLibraryA
ord35
ord37
ord36
lstrcpyA
FreeLibrary
FormatMessageA
GetProcAddress
ExitProcess
GetModuleHandleA

shell32

ord122

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 694B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ