01b802a790e73f6f0fd31e740a147952 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01b802a790e73f6f0fd31e740a147952
Size

374KB
MD5

01b802a790e73f6f0fd31e740a147952
SHA1

1a771b3a3c54d757fe44d5f03ba806bf0fba5c40
SHA256

21d2ff44f4eb4f8ccfa04c52b9bba5863e784c389ac24a5cfef47a30e096f413
SHA512

d15c888aca9a70e90ae0c566eccbc1eaa85096d10db81b3de6eded37eb99f6ee7af2037f14c9bf1979f7325b07b09e7ddb8650e099bcbfaddedf11ce2aa9c73a
SSDEEP

6144:6ccKwIXVJgB1n1D/JMboWNu0QJqdvV9MFpRlD8XMk4r57eJnOFeWm1qOud:XcKZgNB/JC00T2pR+8prYJn8lSqOud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01b802a790e73f6f0fd31e740a147952

Files

01b802a790e73f6f0fd31e740a147952
.exe windows:4 windows x86 arch:x86

891fb560ffe88e600deb81c54f5ed235

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
lstrlenA
SetupComm
LocalFree
CreateFileMappingA
CloseHandle
TlsGetValue
Sleep
GetLastError
GlobalLock
GetACP
LoadLibraryExW
HeapCreate
CreateMutexA
FindClose
FindAtomA
GlobalUnlock
CreateFileA
GetModuleHandleA
FreeEnvironmentStringsA

user32

DrawMenuBar
CheckRadioButton
GetIconInfo
DispatchMessageA
GetDlgItem
GetFocus
CopyRect
CallWindowProcA
DrawEdge
IsWindow
DefWindowProcW
FillRect
GetDC
MessageBoxA

uxtheme

GetThemeSysInt
DrawThemeEdge
DrawThemeText
DrawThemeIcon
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ