71abcd053e767e8463bd377c5c2b908f | Triage

Sharing

General

Target

71abcd053e767e8463bd377c5c2b908f
Size

145KB
MD5

71abcd053e767e8463bd377c5c2b908f
SHA1

407e033b5effa9e02d148cfdc1edc73230f39274
SHA256

77ee252b07e68dc35fc20b9c8b07b2bcce38d45912d9420239578a5e04131b8f
SHA512

68e736496edcd412831eb7c3c526f2bc6eca14f007837d3ae15d187f312ee72afa3dddba33958d310c88ee07320f56035b07d82df2d580a28bdcb4f323158a1e
SSDEEP

3072:/juq3BQoNypn9hvkwXtvmZ6Q4YxmiPkCaepM9GPw:/jdz0n9hvkwXtvmxmwXK94w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71abcd053e767e8463bd377c5c2b908f

Files

71abcd053e767e8463bd377c5c2b908f
.exe windows:4 windows x86 arch:x86

cc8c9676da78be7b9f97fb7b1ba80ac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
lstrlen
CreateNamedPipeW
lstrcpyn
CreateSemaphoreW
SetEvent
GetAtomNameA
GetLocalTime
GetCurrentProcess
GetTempFileNameW
VirtualAlloc
MoveFileA

user32

CreateWindowExW
DefWindowProcW
GetClassInfoW
IsDlgButtonChecked
UpdateWindow
GetMenuItemCount
FillRect
InsertMenuA
EndDialog
DestroyWindow
GetIconInfo
CopyImage
PostMessageW

gdi32

CreateBitmap
FillPath
LineTo

advapi32

RegReplaceKeyW
RegCreateKeyExW

comdlg32

GetSaveFileNameA
GetOpenFileNameW

shell32

StrChrIW
SHBrowseForFolderW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ