6212927e037a9bf31e921b451b2c1524 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6212927e037a9bf31e921b451b2c1524
Size

15KB
MD5

6212927e037a9bf31e921b451b2c1524
SHA1

a727a4fd6014161b0e172f6e5d5c4bead9903060
SHA256

e9109d44b810ed02991b36c10d83ba4be5bb086950c47795f79762e930f6069e
SHA512

57d15115e8b16d76093292866c168ec276d68435f3f69b2b937e0d3b4a464439a2704ead595448b1319471c46909c5b3d26b778968d3766e34abc7513645278f
SSDEEP

192:xzTB3bhfeWV2jbgqUgPgeDW1vInSLhqqUTweij+bqy/2NNomGFPOe0cpScNuUDV+:X3bNEv4eDWunSLh2sdi2DiRJV8ipou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6212927e037a9bf31e921b451b2c1524

Files

6212927e037a9bf31e921b451b2c1524
.exe windows:4 windows x86 arch:x86

220dd34a24dccda46890e8130a432e1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetCommandLineA
GetProcAddress
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree
lstrcmpiA

user32

GetWindowLongA
GetWindowTextA
GetWindowTextLengthA
EnumWindows

Sections

.text
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE