71a8ba6c0c521be1fed0587e361c0b5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71a8ba6c0c521be1fed0587e361c0b5b
Size

55KB
MD5

71a8ba6c0c521be1fed0587e361c0b5b
SHA1

245f73604966ee9774b70aeec902f5c525196f00
SHA256

7d47e1833af3dc431ad3021b1f8eff4e62dc4487fe8931ca3cfeac34ed80f8c1
SHA512

ef1ee01da8bebed4ae373250e76380caa7a39839263d75259cd45fe41995d182ca92582488bd36797aaa73bd8d067051c9a01d52b08b6b1d385cb41019469246
SSDEEP

384:b9KgbHDfVM4egXAvG1zIfs0g59RwxNJTMX:b9K45ziY6sX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a8ba6c0c521be1fed0587e361c0b5b

Files

71a8ba6c0c521be1fed0587e361c0b5b
.exe windows:4 windows x86 arch:x86

7b76e7e74278a5d7e98c11c569d4cf87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
GlobalUnlock
UnmapViewOfFile
lstrcpyA
GetModuleHandleA
GetComputerNameA
FindClose
HeapCreate
CreateFileW
PulseEvent
LoadLibraryW
LocalFree
lstrlenA
CreateProcessA
GetCurrentDirectoryA
CloseHandle
SetLastError
GetCurrentThreadId
GetCommandLineA
Sleep

user32

DispatchMessageA
DrawMenuBar
SetFocus
GetCaretPos
FillRect
GetDC
DrawEdge
CallWindowProcA
CreateIcon
GetDlgItem
CheckRadioButton
CreateWindowExA
IsWindow

cryptui

CryptUIDlgSelectCA
WizardFree
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xehwbns
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE