fa58813ef3763174441c3c07e5890fd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa58813ef3763174441c3c07e5890fd6
Size

120KB
MD5

fa58813ef3763174441c3c07e5890fd6
SHA1

447fa1cb6eb62ab57c5d506f7c8979321d793e35
SHA256

564552f9851f0c39f846111ae8e09ccd6d445788de0dc68acb4ce930ffe2e328
SHA512

0115d71a86de725e87de4b592d8f88a9f293892d43e17d1de94155e70c8d949cecb85507f75aaacf6ecd8ad9ea3d7203e185f0f1019959b64eff05eb97bc6d65
SSDEEP

3072:CX81qsQsfqe/UxmjDArDXaPNmv0JH7GQHCwU:s8nHfp/9ArDXaPNsizCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa58813ef3763174441c3c07e5890fd6

Files

fa58813ef3763174441c3c07e5890fd6
.exe windows:4 windows x86 arch:x86

d11260f0ec0792725e82a3b3dda11312

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

user32

GetActiveWindow
MessageBoxA

msvcrt

__getmainargs
??3@YAXPAX@Z
printf
sprintf
memmove
??2@YAPAXI@Z
strncpy
_exit
_XcptFilter
exit
_acmdln
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE