244b2f0cf0b9fd7181a4de028e076eff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

244b2f0cf0b9fd7181a4de028e076eff
Size

68KB
MD5

244b2f0cf0b9fd7181a4de028e076eff
SHA1

566c6d6493560e3a4da5197854268e5a87e80777
SHA256

768e2be9662645230e07044700f232e4d4c7cf792898ab72126a272b92f8c417
SHA512

1f2d5ee5863ee3ae1154fcc974a1027e2f1b53fb679fe1bca73cc61817f27f3ca7e94722a8662665cc0ac31cdee385284aadea9eb5911d7451eba7c019eb6ed9
SSDEEP

1536:SJp/r13Egx1L7CWKUZxQdxpdCZyz0b3ArqDQX9PsUHKx:sZU+HfpUpdpYCqEXuUHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
244b2f0cf0b9fd7181a4de028e076eff

Files

244b2f0cf0b9fd7181a4de028e076eff
.exe windows:1 windows x86 arch:x86

585791c5a7aa2b08deffd64d7c04880a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRectEx
DefWindowProcA
GetCapture
GetDlgItemTextA
GetForegroundWindow
GetTopWindow
IsChild
IsWindowEnabled
PostMessageA
RemovePropA
TabbedTextOutA

kernel32

AddAtomA
EnumSystemGeoID
GetFileSize
GetFullPathNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
SetCurrentDirectoryA
SetFilePointer
VirtualAlloc
WriteFile

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 22KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE