120bd2e6ad801156404ef1b75c7f939f | Triage

Sharing

General

Target

120bd2e6ad801156404ef1b75c7f939f
Size

55KB
MD5

120bd2e6ad801156404ef1b75c7f939f
SHA1

12c64116afe1bd9faaa96fc2ef98e051bec3b940
SHA256

26b5541fb16ed237c6fd288e314728ce512d1a84fd46abd27507081ad4e21b12
SHA512

cbc7555edd300a2e068a2265c7dc87316d710ac312a2b0e30158aba2bad6e05858cd9d2295bffd15c4afe880d69367e3ab7cd8ee8f2cd312dc01c74de02852c4
SSDEEP

768:5ajfqJMzNp5p3hs0qLVwgiiO7AF6Xa6SRepCUixhbFziLpsfU5M178MyMISVp:Yjfq4txrq5wgzOsPkGzYqfU5RMhVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
120bd2e6ad801156404ef1b75c7f939f

Files

120bd2e6ad801156404ef1b75c7f939f
.exe windows:4 windows x86 arch:x86

522d8e4b8d7784d6fa7f4b0296f950da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
LoadLibraryExA
GetProcessHeap
GetEnvironmentVariableA
TlsGetValue
DeleteAtom
ReleaseMutex
SetLastError
GetModuleHandleA
lstrlenW
GetStdHandle
GetCurrentThreadId
GlobalFree
CreateFileA
CloseHandle
GetExitCodeProcess
TlsAlloc
CreateMutexA
HeapCreate
GlobalUnlock

user32

GetDlgItem
GetDC
GetCaretPos
DrawEdge
CallWindowProcA
DrawMenuBar
CreateMenu
CreateWindowExA
IsWindow
CheckRadioButton
FillRect
DispatchMessageA
SetFocus

rsaenh

CPDecrypt
CPDeriveKey
CPHashData
CPSignHash
CPGenKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iartpad
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE