010fb8392e959394c0ecc52e313e315e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

010fb8392e959394c0ecc52e313e315e
Size

196KB
MD5

010fb8392e959394c0ecc52e313e315e
SHA1

6c5abd3df76e71f88130cfaaa09e624e020bfa37
SHA256

3fc06c3ffaced4b6af938e00fd2c2685e742304f8e6bd63541a487c8fa8753df
SHA512

5cf1ec5aac62532c9c3226946e356987e6f1369506765e6d6c2d043f5c496e3ec211910fd6f57431bc565eea9cb687e8d603a0aa67f22c7a59dc8dedf3158ca0
SSDEEP

6144:E1kgcZX6ksZM0hhJLnDiwpWYT11cvcQ+xPT3VB:hTZX6kmLLnDf1mQrlB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
010fb8392e959394c0ecc52e313e315e

Files

010fb8392e959394c0ecc52e313e315e
.exe windows:5 windows x86 arch:x86

703b79c6cb7b566b1ea5d06939bd229d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SwitchToThisWindow
ShowCaret
GetDlgCtrlID
MapDialogRect
EnumWindows
IsZoomed
SetWindowPos
GetMenuItemCount
InvalidateRect
MessageBoxA
GetShellWindow
EqualRect
GetKeyboardLayoutNameW
RemovePropW
GetMenuItemID
AdjustWindowRect

shlwapi

PathIsDirectoryEmptyA

kernel32

FindCloseChangeNotification
GetThreadContext
IsDBCSLeadByte
WaitForSingleObjectEx
AddAtomA
OpenSemaphoreW
EnumResourceLanguagesA
FindResourceExW

gdi32

GetTextCharsetInfo
ExtTextOutW
GetRgnBox
Ellipse
ExcludeClipRect
ScaleWindowExtEx
TextOutA

Exports

Exports

LoadMutantExW@8
ShowTimerNew@4
DeleteWidthExA@12
IncrementExpressionExA@16
FreePointer@12

Sections

.text
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cud
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ