390afad8e105d66e4d915d88830dd5fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390afad8e105d66e4d915d88830dd5fb
Size

276KB
MD5

390afad8e105d66e4d915d88830dd5fb
SHA1

174d4fa2d0afaf2ca616d70aa66257a8b813d7b2
SHA256

2bc8f9f1a1ed84b1624bacd68def988eb5aa2f32e150ff474fe3852b9c9dc75b
SHA512

06e6ea336b2cd30ab44ec1afe30e6fdb3d9d0c039386e0eb7fd5223dead682cacee88794af5f25890044cd3a3b9e38daf8fe00b5b4b035e48aa05b10efc3d32f
SSDEEP

6144:tw1O51t53rLJh/cGYHU+Z1eSPq7/sN1YcxIjxWf:f51r3rLrkl0+r270N1QWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390afad8e105d66e4d915d88830dd5fb

Files

390afad8e105d66e4d915d88830dd5fb
.exe windows:4 windows x86 arch:x86

5d8393db4d1447ff40e6d11e9921e262

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
SetLastError
FindResourceW
lstrlenA
GlobalUnlock
LoadLibraryW
UnmapViewOfFile
GetCurrentThreadId
lstrcpyA
GetCommandLineA
PulseEvent
CreateFileW
GetModuleHandleA
GetCurrentDirectoryA
LocalFree
HeapCreate
Sleep
CloseHandle
CreateProcessA
FindClose

user32

CallWindowProcA
FillRect
CheckRadioButton
DrawEdge
GetDlgItem
CreateIcon
GetDC
DispatchMessageA
CreateWindowExA
DrawMenuBar
SetFocus
GetCaretPos
IsWindow

cryptui

LocalEnroll
WizardFree
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 234KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ