1047f3357741f770dff388ebb383d8a4 | Triage

Sharing

General

Target

1047f3357741f770dff388ebb383d8a4
Size

6KB
MD5

1047f3357741f770dff388ebb383d8a4
SHA1

de9fa34cbe728d0ba3aff4532050df8a76bce320
SHA256

52c3c828aff5d1c184979adc3ed5a16f68ac17b10d1cb74d81738fd6c4e5ea0b
SHA512

e631112b0b99f105906fe6a7d672be296b807c8cc469230c442b927f80868c555f122530a3832dea7c5c9d12e0699913bf620b4ce1dd1d56065a6f42b19546d3
SSDEEP

96:ZEbyzRCy3/Jamp77pTONefI5rbrF0+tIaRmNsPekC7uuAvNAxBPuBAl2UDd7GJ:D1Cy3/3ppTHabrfbPekLuOWxBPAbU7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MousePazzo.exe

Files

1047f3357741f770dff388ebb383d8a4
.zip
MousePazzo.exe
.exe windows:4 windows x86 arch:x86

c296b0ae20a5c4851cc31c9bd7bbb9dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
FreeEnvironmentStringsW
GetEnvironmentStrings
GetProcAddress
VirtualAlloc
LoadLibraryA
HeapFree
WriteFile
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
Sleep
SetHandleCount
GetOEMCP
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
VirtualFree
RtlUnwind
GetStdHandle
GetFileType
HeapDestroy
HeapCreate

user32

SetTimer
GetAsyncKeyState
GetMessageA
DispatchMessageA
SetCursorPos
PostQuitMessage
GetCursorPos

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE