03bcbae35f07da3ece8bd6a9b69906cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03bcbae35f07da3ece8bd6a9b69906cc
Size

38KB
MD5

03bcbae35f07da3ece8bd6a9b69906cc
SHA1

e2a8018f6a35eb990da0413d5d7962771fdd1708
SHA256

89593811935f3f8f32521ba6dfa8d2b99240dc32ee0c255d75823809d806a90e
SHA512

50ccda97f5c25041123c4a4acee8b5da894f88e47de89801f9096b6aa5bf299628c70bf1ef811505364bce0aa5f82cdf78d828e51015517ca4f476708e35a7c1
SSDEEP

768:cD8Mku/08vChRzSbJ/iB1ljyRFQPeB1Qi6YyJVQQeDlV8T3+cxcGc:ABkuM1hR2g18CeB1QMyJVQQeD4vxcGc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03bcbae35f07da3ece8bd6a9b69906cc

Files

03bcbae35f07da3ece8bd6a9b69906cc
.exe windows:4 windows x86 arch:x86

a49163137f7da412d513f7b8ae5fcb56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

GetParent
GetLastActivePopup
GetTopWindow
GetWindowTextLengthA
AnyPopup
IsIconic
WaitForInputIdle
CloseWindow
IsWindowUnicode
GetForegroundWindow
TileWindows
ShowWindowAsync
SetForegroundWindow
SetParent
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE