72fba7d95c7b8013062d4b729600003b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72fba7d95c7b8013062d4b729600003b
Size

26KB
MD5

72fba7d95c7b8013062d4b729600003b
SHA1

1bda0e6a3d3f169fa835c89959eb59791148ce1c
SHA256

4cda7513fdfbf73a757c4345f48b135e9a812bbcfc888e18543a37b90658b2b4
SHA512

0f10f7eb00bc571fe688d3124539faa0ea85862f308be96f89efc2c1c5ad9b5e91703569ac0edf9bbd31eae41fc73daa77181f078574d2bb9540a0818c019794
SSDEEP

768:lSqbJUN57q8uvhA04jBhs1ahCvguURaQW:MmcGlhAV1hYNURaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72fba7d95c7b8013062d4b729600003b

Files

72fba7d95c7b8013062d4b729600003b
.exe windows:4 windows x86 arch:x86

5b2ddb05cc85bca39c8db1b18a0adf04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CloseHandle
HeapCreate
LoadLibraryW
TerminateThread
IsBadStringPtrW
CreateFileA
GetModuleHandleA
CreateMutexA
Sleep
GetEnvironmentVariableA
LocalFree
ReleaseMutex
TlsGetValue
SetLastError
GetACP
lstrlen
PulseEvent
GlobalUnlock
FindClose

user32

DispatchMessageA
GetIconInfo
IsWindow
CheckRadioButton
GetDC
DrawEdge
DrawMenuBar
DefWindowProcW
FillRect
CopyRect
SetFocus
GetDlgItem
CallWindowProcA

msasn1

ASN1BERDecNull
ASN1BERDecBool
ASN1BEREncBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ahmpyfk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE