116ef2c8fa39c841a758b4e0182dd90e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

116ef2c8fa39c841a758b4e0182dd90e
Size

311KB
MD5

116ef2c8fa39c841a758b4e0182dd90e
SHA1

a82c1685d70df9e128e8316d8b272665b086fef8
SHA256

5cc051cb1a3fdb87b4792c87aeec3b110750a93b59c2678c82137d5717512352
SHA512

be65dda832a57462a0ed539087fe9ae5275ee7142be7dec92ce832aa6269ad32edc5d526a4fe526a770aa689d089bdc2c1536545b0aeeba7a9af0c5f6d36a34e
SSDEEP

6144:mPU0gMLl/MmgDgkFWTHYbS2Lee6jSEpiF9CXwAYH7j:mZ/bcPFWzYbS96DmwJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
116ef2c8fa39c841a758b4e0182dd90e

Files

116ef2c8fa39c841a758b4e0182dd90e
.exe windows:4 windows x86 arch:x86

99cf0a80d2f660191ad019fdfbfdb439

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

lstrlenA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
LockResource

comctl32

InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE