0659157e50c0de2d91a6911be7747ae8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0659157e50c0de2d91a6911be7747ae8
Size

345KB
MD5

0659157e50c0de2d91a6911be7747ae8
SHA1

031e88e336cdc8fdc39c31fe3865204569fceb69
SHA256

73e1102343d9233b32637781e1767428d2ce87f477135579d588983fab6907dc
SHA512

b2f9fa01725814229029a399d6447114d4eb81a02339812e517fe41581d329b0a0f19015e752591a7289b79df4b1e270987fe756e20e8bfe7b331d8ec6e9e083
SSDEEP

6144:DMR/GEc8y+RE++og9mSrgzO98Peo1dTApwMSY1+gL1//imfCCFsE9nogj3Gi:M+Yyj99mSszOCT6gm+gRXHCcdogzGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0659157e50c0de2d91a6911be7747ae8

Files

0659157e50c0de2d91a6911be7747ae8
.exe windows:5 windows x86 arch:x86

e651a1b4ca30fc95ae9c0b9948aac27e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CascadeWindows
CheckRadioButton
CreateWindowExW
ActivateKeyboardLayout
DefWindowProcW
DestroyIcon
DlgDirListW
DrawEdge
DrawIconEx
EndMenu
GetKeyNameTextW
GetMessageW
GetMessageTime
GetPropW
GetScrollRange
UnhookWinEvent
VkKeyScanExW
ToAsciiEx
SetWindowLongW
SetTimer

kernel32

GlobalGetAtomNameW
GlobalLock
InitAtomTable
IsBadCodePtr
IsValidLocale
ReadFile
SetConsoleCP
GetModuleHandleW
VirtualProtect
GetPriorityClass
GetThreadLocale
GetTickCount
GetUserDefaultLangID
GlobalAlloc
ExitProcess
SetConsoleMode
GetProcessVersion
GetStdHandle

Sections

.text
Size: 79KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE