13ca49519f0a982e04421c726e436c2e | Triage

Sharing

General

Target

13ca49519f0a982e04421c726e436c2e
Size

74KB
MD5

13ca49519f0a982e04421c726e436c2e
SHA1

e55ce30175a486a100d00792ba479785ee7c7d6e
SHA256

6421de60ccbd279d16634c20f64b88a01cb91368f1bb476f2915f0fe4b8322a3
SHA512

09128afc3f953457823b2d9f3821e9fa158dd940be469f38841dd9aec4912258ae7f3fb2815b85834f39e8311c70e46762c12baa98d7bc433e694267afbe8311
SSDEEP

768:a9UJS79zlNuQDwVNRq8tLBs5tc6Eq2mMLjHx158I+IFehtMdTa29gpkUdHDBibPm:2Uc1lNUVNPeaFR0beeXwrgTeaH8/H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13ca49519f0a982e04421c726e436c2e

Files

13ca49519f0a982e04421c726e436c2e
.exe windows:5 windows x86 arch:x86

c42714c36db74bfba7b7238523f0f9f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ScaleViewportExtEx
Escape
EnumFontsW
GetTextAlign
GetTextExtentPoint32W
RemoveFontResourceW

msvcrt

calloc
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs

kernel32

OpenSemaphoreW
FreeLibrary
CreateNamedPipeW
FindClose
GetModuleHandleW
LoadLibraryExW
GetModuleHandleA
LocalSize

user32

wsprintfA
BeginDeferWindowPos
CreateWindowExW
InSendMessageEx
CopyAcceleratorTableW
GetKeyboardLayout
GetDlgItemTextW
ClipCursor
InflateRect
EnumWindows
TrackPopupMenu
IsCharAlphaW
GetMenuItemID
TrackPopupMenuEx
RegisterClassA

shlwapi

StrRChrA

Exports

Exports

?FutureProspect@@YGHPADK|U

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE