0927d7058c33ca77821715698c6517a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0927d7058c33ca77821715698c6517a6
Size

52KB
MD5

0927d7058c33ca77821715698c6517a6
SHA1

45318d6584144a012f97219ed4cd6380b72b5417
SHA256

817652d0cd8aa7855efc9ffb43369f54a2dfd61308d522681829438e0e1bc61c
SHA512

f501f6ad9749ac0d8076881e43112010b8de252265d0697109475eecae5bb9b9f8f1531042afaa472fb0a260e17bbd9c93af0447fac9167c237a19b42ba23c8a
SSDEEP

768:ogxXvDkZtsuhu3fFr+LGPT/sO6iaz1nr6BSxroWmH+hDQZOZE3Gku40p9:X1kZimAa6/6/R6BS9o5ehDQZOZE2Tp9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0927d7058c33ca77821715698c6517a6

Files

0927d7058c33ca77821715698c6517a6
.exe windows:4 windows x86 arch:x86

ad8bea10d576eedbd3f69f7ded436e56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetLogicalDrives
TlsSetValue
GetCommandLineA
CreateProcessInternalA
lstrcatA
TlsFree
GetModuleHandleW
GetCurrentThreadId
TlsGetValue
GetModuleFileNameA
GetUserDefaultLangID
GetDriveTypeW
IsDBCSLeadByte
VirtualAlloc
GetCurrentThread
GetSystemDefaultLCID
GetACP
FreeLibrary
GetCurrentProcessId
GetOEMCP

user32

BeginPaint
GetWindowTextA
IsWindowVisible
GetWindowTextLengthA
CloseWindow
ReleaseDC
GetActiveWindow
GetDC
GetClassLongA
GetSystemMetrics
GetWindowLongA
UpdateWindow
RegisterClassA
GetFocus
ShowWindow
IsIconic
GetWindowDC
GetWindow
GetForegroundWindow

imagehlp

BindImage
FindFileInPath
CheckSumMappedFile
ImageLoad
ImageNtHeader
FindDebugInfoFile

oleacc

GetStateTextA
GetRoleTextA
DllGetClassObject
LresultFromObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE