738d04c4e0b20a2a88ad5d28adae0053 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

738d04c4e0b20a2a88ad5d28adae0053
Size

151KB
MD5

738d04c4e0b20a2a88ad5d28adae0053
SHA1

f5fad29738a427f01ca38c648ba5371d06ce3082
SHA256

5b63c8160fc3bdde530a897bb9d776175ba7ca7beaa5e98969462aae7000d4cf
SHA512

54e00456f35b6ed6a7ed73033b42feaeffab360b82a893d517bf6b0b8c3b681c99586c0f5a84cc696956af6d128b1f781c0309ebbd98431c3bff9b1458085b5f
SSDEEP

3072:aTVB3JXNgMci8mTsw2YJE9mU51XktdEfeRorE3pe2dsNCOlBudPRx:cVBBNwKTr2YJEzXktKGR6E3Q2KNCOlBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
738d04c4e0b20a2a88ad5d28adae0053

Files

738d04c4e0b20a2a88ad5d28adae0053
.exe windows:4 windows x86 arch:x86

ac009c670d3636fb81065482546d493b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesW
WriteFileGather
GetStartupInfoA
GetCurrentProcessId
TransmitCommChar
GetTimeZoneInformation
IsBadStringPtrA
EnumDateFormatsA
SetCommTimeouts
CreateWaitableTimerW
ExpandEnvironmentStringsA
GetFileAttributesA
GetModuleHandleA

version

GetFileVersionInfoW
VerLanguageNameW
GetFileVersionInfoA

user32

CharPrevExA
FindWindowA
GetCursorPos

msvcrt

__p__fmode
exit
_controlfp
_except_handler3
_adjust_fdiv
_exit
__p__commode
__setusermatherr
_strupr
_acmdln
_ismbcpunct
__set_app_type
_initterm
_XcptFilter
__getmainargs

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ