fa2942325a88b8ab98624f3d71bb99d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa2942325a88b8ab98624f3d71bb99d0
Size

57KB
MD5

fa2942325a88b8ab98624f3d71bb99d0
SHA1

22eaf874ea47f7507fcdaeb861de3847829c7b27
SHA256

cab8744c3426cef73f29d0a8a6f3e854c686c3976ae2c9a1b02fc5dd5884ee95
SHA512

8d882e23e6eab54eefca6113c3007b8b80bee1e4f71dd87567738d06845052244f127885f61c1bebcbbe8a6aff7d949dcb1819f2a5931d059c765aae9853321b
SSDEEP

1536:pA+EVwAzl2fgZRVDyx+tkCLsAsvxTFiiDpuee:pAbBxeukCQAiBFv8ee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa2942325a88b8ab98624f3d71bb99d0

Files

fa2942325a88b8ab98624f3d71bb99d0
.exe windows:1 windows x86 arch:x86

883170ec7fb38bfec35fa348dd0e656d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreateToolbarEx
CreatePropertySheetPage
ImageList_SetDragCursorImage

kernel32

CloseHandle
GetConsoleTitleA
ExitProcess

Sections

.text
Size: 26KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 437KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE