ff832faa4c8b5d1ca562c2234275ea61 | Triage

Sharing

General

Target

ff832faa4c8b5d1ca562c2234275ea61
Size

252KB
MD5

ff832faa4c8b5d1ca562c2234275ea61
SHA1

9c2fda07bb001ff8651494c747ded0ec1f9ea352
SHA256

805f3d557622a22b3edc224d910b1175efd108303c8b7bec49105af8affddd11
SHA512

b86abf2f4389ea0c7edd60c06ebbc99caf2ba75339db9579ada696a68336356d6f70384defa72de51de8de959c5ab852bc908fe44863aaf1e3f2d71f0f094327
SSDEEP

3072:QX6d6jn+NREPR0m8UPpRbh+OhEjLzWnPuqDis65zP8m/DspcYvXfJ/bfcmVk:QX6LNCJ0UDEjL0PVyzVrsptvX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff832faa4c8b5d1ca562c2234275ea61

Files

ff832faa4c8b5d1ca562c2234275ea61
.exe windows:5 windows x86 arch:x86

38908e331087da4cb0bde8b19ced3109

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
IsWindowVisible
BeginPaint
WindowFromPoint
EndPaint
LoadIconA
LoadCursorA
RegisterClassExW
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA

gdi32

GetTextColor
SetRectRgn
FrameRgn
GetStockObject
CreateFontIndirectA
DeleteObject

kernel32

GetProcAddress
HeapCreate
HeapAlloc
FreeLibrary
LoadLibraryA
InitializeCriticalSection
EnterCriticalSection
GetEnvironmentStrings
LeaveCriticalSection
GetEnvironmentVariableA
GetLastError
GetThreadLocale
GetTickCount
GetPrivateProfileStringA
SetFileAttributesA
CompareStringA
DeleteCriticalSection

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ