007273669de28ce8ec100529e5631bc9 | Triage

Sharing

General

Target

007273669de28ce8ec100529e5631bc9
Size

156KB
MD5

007273669de28ce8ec100529e5631bc9
SHA1

12b3675c4a00bf15a4fb4d72ada162e9c819f7e1
SHA256

6bb31aa9062df7eaeb5e66c8a2219ca790c21eb1e1b508762601652d399d2bae
SHA512

68e07c3ecda385ad88be51bf1d53b6e9982e9d85051221ada2cbc999cb1ea69bbc63943dbcc1a52a27c7372d8efb25f2fe42fdb389894a03047d02ed9e8cffc8
SSDEEP

3072:bWHRXZhKeuhp6VQSC3c9jxF9If2QI9+PjsknEigv71vdprN:SxFdV/ec3Fg2l+Pjb5gv7btN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
007273669de28ce8ec100529e5631bc9

Files

007273669de28ce8ec100529e5631bc9
.exe windows:5 windows x86 arch:x86

1a16cce976f5e69b8ab1b65a32f63bb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharAlphaW
IsWindowEnabled
GetDlgItemTextA
SetWindowRgn
FillRect
DrawStateA
IntersectRect
SetWindowTextA

msvcrt

_cexit
setvbuf
_exit
time
__p__fmode
__setusermatherr
_XcptFilter
swprintf
__p__commode
__set_app_type
_controlfp
_initterm
_ismbblead
towlower
exit
_amsg_exit
__getmainargs

kernel32

GetNumberFormatA
GetTimeFormatW
GetTempPathA
FindFirstFileW
VirtualProtect
GetHandleInformation

gdi32

GetBkColor

Exports

Exports

_AttachThreadInputAttachThreadInput@0
_AttachThreadInputAttachThreadInputAttachThreadInputAttachThreadInput@0

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.txtdat
Size: 1024B - Virtual size: 691B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ