273dbbdb9b56bc1d521e6c849492dd0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

273dbbdb9b56bc1d521e6c849492dd0a
Size

295KB
MD5

273dbbdb9b56bc1d521e6c849492dd0a
SHA1

0c6f57ee527b770b6a267d72285d9c18e21b095a
SHA256

2cb37637f0bb8e1b9fb1134bb89432cb832bc290340b6e2de8d21a54e6fae426
SHA512

3c3bfca2e9d71059922fa487e9f0bd3093de61bf0723eac3cf606d759b01787599ff81bf78e99557672b7986da13ddbc385954fb38c8ac70630a0e833f6283ab
SSDEEP

6144:GWK3ECQFaiCfY0fDZTPTIlJzDPjyVShYWh/7tdx0:bsrA1l0L10JryCF17B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
273dbbdb9b56bc1d521e6c849492dd0a

Files

273dbbdb9b56bc1d521e6c849492dd0a
.exe windows:4 windows x86 arch:x86

4577b7d39a6dae35546c901acc1373e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
FindClose
ReleaseMutex
DeleteFileA
FindResourceExA
CreateSemaphoreW
GetVersion
SuspendThread
SetEvent
GetStartupInfoA
ExitProcess
GetCommandLineW
WriteConsoleA
HeapDestroy
OpenEventA
GetEnvironmentVariableW
CloseHandle
GetModuleHandleA
lstrlenW
CloseHandle

user32

CreateIcon
GetClassInfoA
GetSysColor
IsZoomed
DispatchMessageA
DrawTextW
PeekMessageA
GetWindowLongA
FindWindowA
DispatchMessageA
SetFocus
CallWindowProcW
GetKeyState

docprop

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ